[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Today's i386 netinst (20051006): still secure apt failure



On Thursday 27 October 2005 12:47, Frans Pop wrote:
> So I guess we also need an option like
>    APT::Authentication::TrustFILE "true";

Patch for apt that does this (tested):

diff -ru ../apt-0.6.42.1/apt-pkg/deb/debmetaindex.cc ./apt-pkg/deb/debmetaindex.cc
--- ../apt-0.6.42.1/apt-pkg/deb/debmetaindex.cc 2005-10-20 11:33:43.000000000 +0200
+++ ./apt-pkg/deb/debmetaindex.cc       2005-10-27 13:08:22.000000000 +0200
@@ -169,6 +169,10 @@
       if(URI.substr(0,strlen("cdrom:")) == "cdrom:")
         return true;

+   if(_config->FindB("APT::Authentication::TrustFILE", false))
+      if(URI.substr(0,strlen("file:")) == "file:")
+        return true;
+
    if (FileExists(VerifiedSigFile))
       return true;
    return false;
diff -ru ../apt-0.6.42.1/doc/examples/configure-index ./doc/examples/configure-index
--- ../apt-0.6.42.1/doc/examples/configure-index        2005-10-20 11:33:43.000000000 +0200
+++ ./doc/examples/configure-index      2005-10-27 13:09:30.000000000 +0200
@@ -75,6 +75,7 @@
   Authentication
   {
      TrustCDROM "false";            // consider the CDROM always trusted
+     TrustFILE "false";             // consider file sources always trusted
   };

   GPGV
diff -ru ../apt-0.6.42.1/debian/changelog ./debian/changelog
--- ../apt-0.6.42.1/debian/changelog    2005-10-23 11:28:51.000000000 +0200
+++ ./debian/changelog  2005-10-27 13:10:29.000000000 +0200
@@ -1,3 +1,10 @@
+apt (0.6.42.2) unstable; urgency=low
+
+  * added "APT::Authentication::TrustFILE" option; also needed by
+    installer people
+
+ -- Frans Pop <fjp@debian.org>  Thu, 27 Oct 2005 13:09:46 +0200
+
 apt (0.6.42.1) unstable; urgency=low

   * fix a incorrect example in the apt_prefrences man page


This would also mean patching base-installer of course to add the proper
line to /etc/apt/apt.conf.

Attachment: pgp5bE0yuIDYn.pgp
Description: PGP signature


Reply to: