RPi-Distro / repo

Issue tracking for the archive.raspberrypi.org repo
37 stars 1 forks source link

Upgrade messed with my trust settings in apt #230

Closed jgoerzen closed 3 years ago

jgoerzen commented 3 years ago

Hi,

After today's dist-upgrade, I found this file:

/etc/apt/trusted.gpg.d/microsoft.gpg

It is important to me that only sources that are authorized be used for package installation. Treating other sources as trusted should not happen with a dist-upgrade point release.

This appears to be related to sources.list.d/vscode.list which is also of concern but the primary concern is that the trust model of a running system is altered without my permission.

XECDesign commented 3 years ago

You can find a more official response here:

https://www.raspberrypi.org/forums/viewtopic.php?f=63&t=302591&p=1813830#p1813830

https://www.raspberrypi.org/forums/viewtopic.php?f=63&t=302591&p=1815834#p1815834