On Sun, Jul 04, 2010 at 07:56:49PM +0900, Ansgar Burchardt wrote:
> Sbuild::AptitudeBuildDepSatisfier always passes the option
> Aptitude::CmdLine::Ignore-Trust-Violations=true to aptitude, allowing
> the installation of unauthenticated packages.  I think this should
> depend on the $apt_allow_unauthenticated option in the configuration
> file:
> 
>   # Force APT to accept unauthenticated packages.
>   # This is disabled by default: only enable it if you know what you are
>   # doing.
>   #$apt_allow_unauthenticated = 0;

This certainly looks like we should be defaulting to what is
set in $apt_allow_unauthenticated, unless there's some reason
not to do that for dependency resolving?  Do you see any
problems if you set
Aptitude::CmdLine::Ignore-Trust-Violations=false ?


Regards,
Roger

-- 
  .''`.  Roger Leigh
 : :' :  Debian GNU/Linux             http://people.debian.org/~rleigh/
 `. `'   Printing on GNU/Linux?       http://gutenprint.sourceforge.net/
   `-    GPG Public Key: 0x25BFB848   Please GPG sign your mail.

Attachment: signature.asc
Description: Digital signature

Reply via email to