From 11d424bf494625db5e458cef9baf4ed7f12929a9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?= Date: Sat, 7 Nov 2015 00:57:38 +0100 Subject: [PATCH] fedora: Add skip_if_unavailable=False to Qubes repositories DNF defaults to skip_if_unavailable=True, so make sure that Qubes repositories are treated as vital one. Otherwise it would allow an attacker to cut the user from updates without visible error (when using PackageKit for example). Do not set it for unstable repository, as it isn't critical one. Fixes QubesOS/qubes-issues#1387 (cherry picked from commit 5102e4f7aa322b9b7777f00f80e80be5f5c51301) --- misc/qubes-r3.repo | 3 +++ 1 file changed, 3 insertions(+) diff --git a/misc/qubes-r3.repo b/misc/qubes-r3.repo index 2fc6bd0..814fe1a 100644 --- a/misc/qubes-r3.repo +++ b/misc/qubes-r3.repo @@ -2,6 +2,7 @@ name = Qubes OS Repository for VM (updates) baseurl = http://yum.qubes-os.org/r3.0/current/vm/fc$releasever gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-3-primary +skip_if_unavailable=False gpgcheck = 1 enabled=1 @@ -9,6 +10,7 @@ enabled=1 name = Qubes OS Repository for VM (updates-testing) baseurl = http://yum.qubes-os.org/r3.0/current-testing/vm/fc$releasever gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-3-primary +skip_if_unavailable=False gpgcheck = 1 enabled=0 @@ -16,6 +18,7 @@ enabled=0 name = Qubes OS Repository for VM (updates-testing) baseurl = http://yum.qubes-os.org/r3.0/security-testing/vm/fc$releasever gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-qubes-3-primary +skip_if_unavailable=False gpgcheck = 1 enabled=0