Bug#579028: pbuilder: installs untrusted packages without asking
Vagrant Cascadian
vagrant at freegeek.org
Sat Jun 12 01:20:58 UTC 2010
in pbuilder-satisfydepends-aptitude: $CHROOTEXEC aptitude -y --without-recommends -o APT::Install-Recommends=false -o Aptitude::CmdLine::Ignore-Trust-Violations=true -o Aptitude::ProblemResolver::StepScore=100 install pbuilder-satisfydepends-dummy
i don't know if the other satisfydepends scripts have similar issues.
seems like the Aptitude::CmdLine::Ignore-Trust-Violations=true should at least
be configureable somehow, if not defaulting to false.
this appears to have been added quite some time ago. from the ChangeLog:
2007-04-22 Loic Minier <lool at dooz.org>
* pbuilder-satisfydepends-aptitude: Pass
Aptitude::ProblemResolver::StepScore and
Aptitude::CmdLine::Ignore-Trust-Violations flags to aptitude to
help resolve complex situations relatively common in experimental and
support unsigned repositories like we do for apt-get.
so it's obviously intentional...
live well,
vagrant
More information about the Pbuilder-maint
mailing list