From c73da1f920930dc6d10e0b8a347ddcaf689bca66 Mon Sep 17 00:00:00 2001 From: Panu Matilainen Date: Tue, 26 Jan 2010 17:33:19 +0200 Subject: [PATCH] Leave rpm's hkp keyserver configuration alone - rpm < 4.6 used to try and fetch and import any missing keys from keyserver automatically on rpmdb iteration if hkp_keyserver was set, which caused hideous slowdowns and huge load on pgp keyservers AND was a security hazard as rpm thinks imported == trusted key. This is safe enable now as rpm will only ever import keys when explicitly told to do so with --import - this makes pgp import directly from PGP servers work, ie 'rpm --import 0x' --- macros | 3 --- 1 file changed, 3 deletions(-) diff --git a/macros b/macros index 69ac0f3..77844f0 100644 --- a/macros +++ b/macros @@ -179,9 +179,6 @@ unset DISPLAY\ %__global_cflags -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -# Disable lookups -%_hkp_keyserver %{nil} - # Use these macros to differentiate between RH and other KMP implementation(s). redhat_kernel_module_package 1 kernel_module_package_release 1