View Single Post
Posts: 388 | Thanked: 842 times | Joined on Sep 2009 @ Finland
#384
Originally Posted by zimon View Post
I noticed in the process list, fapm was using apt-get with --allow-unauthenticated option.

IMO, it should at least warn, or user should be able to set in the options not to install unauthenticated and unverified packages.

How about overall, if (authenticated) packages are installed with fapm, does it check them against repository's signatures, or does it just download them and install them blindly then with dpkg -i ?
All package download and install stuff is handled by apt-get, no extra verifications are done. Adding that option was the easiest way to ensure that the installation goes smoothly most of the time (I remember encountering unauthenticated packages fairly often).

Does HAM warn about unauthenticated packages (besides giving the generic warning for every single package you're about to install)?