From 24780a43667620b35206a72d88bbb097ab8e7ade Mon Sep 17 00:00:00 2001
From: Rafal Wojtczuk <rafal@invisiblethingslab.com>
Date: Fri, 16 Sep 2011 12:17:27 +0000
Subject: [PATCH] Trusted_parts changed

---
 Trusted_parts.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Trusted_parts.md b/Trusted_parts.md
index 4e53a4af..563e9d18 100644
--- a/Trusted_parts.md
+++ b/Trusted_parts.md
@@ -25,6 +25,7 @@ Trusted non-Qubes-specific components
 -   network PV frontends (exposed to potentially compromised netvm) and backends
 -   block backend implemented in dom0 kernel
 -   integrity of Fedora packages (meaning, they are not trojaned)
+-   rpm and yum in dom0 must correctly verify signatures of the packages
 
 At the current project stage, we cannot afford to spend time to improve them - all we can do is to limit the number and extent of these components.