Once upon a time, Jeffrey Walton <noloa...@gmail.com> said:
> This always baffles me... Fedora includes irrelevant keys. For
> example, old keys and keys for different arches. Something feels wrong
> about trusting them.

The arch-specific keys are symlinks.

The files in /etc/pki/rpm-gpg are not all in your RPM database either;
they're just made available (so more just kind of a history thing).
They're normally only installed if a repo file in /etc/yum.repos.d
references one and you try to install a package from the repo (and so
accept the key when prompted).

-- 
Chris Adams <li...@cmadams.net>
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to