[packagekit] Support for trusted packages in InstallPackages

[Daniel Nicoletti]

>> By default trusted will be True. If the backend encounters a not trusted
>> package it should raise BAD_GPG_SIGNATURE error and send the
>> corresponding RepositorySignatureRequired signal.
>
>Why the signal? If we do trusted=true on InstallFiles then we just get
>an ErrorCode back, no?

Sebastian afaik there's no way of knowing if a package has a bad GPG
in APT, so I think creating REPO_UNSIGNED is what you (and me) want.
So when starting a transaction that will have packages that comes from
a repo unsigned we can fail with the error..

BTW, maybe they should have separate items in
installPackage(pkgs, pkg-signed, repo-signed)??

Best,
Daniel.



----- Mensagem original ----
De: Richard Hughes <hughsient at gmail.com>
Para: PackageKit users and developers list <packagekit at lists.freedesktop.org>
Enviadas: Terça-feira, 16 de Junho de 2009 11:42:07
Assunto: Re: [packagekit] Support for trusted packages in InstallPackages

On Tue, Jun 16, 2009 at 3:35 PM, Sebastian Heinlein<liste at glatzor.de> wrote:
> I would like to see support for separating between trusted and untrusted
> packages in the InstallPackages method. It should behave in the same way
> as in InstallFiles.

Yes, I have the same issue for Fedora rawhide, which is unsigned, and
always will be. This issue will become much more important when the
polkit1 branch gets merged, as then we will default for no prompt for
signed packages.

> By default trusted will be True. If the backend encounters a not trusted
> package it should raise BAD_GPG_SIGNATURE error and send the
> corresponding RepositorySignatureRequired signal.

Why the signal? If we do trusted=true on InstallFiles then we just get
an ErrorCode back, no?

> The frontend should in this case show a warning about the installation
> of untrusted software and provide an alternative button which allows to
> run InstallPackages with trusted = False.

Whilst I agree, this is a API break, and probably we'll need to branch
for 0.5.x before that. I'll start working in a private branch and we
can discuss the roadmap for 0.5.x later this week.

Richard.
_______________________________________________
PackageKit mailing list
PackageKit at lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/packagekit



      Veja quais são os assuntos do momento no Yahoo! +Buscados
http://br.maisbuscados.yahoo.com