Hello,
I am analyzing the code of libzypp and found RpmDb::checkPackage has never been used.
So, I think libzypp have not do digest/signature check before installing packages, right?
Is it by design, or missing? I think it’s necessary.
--
Best regards,
Zhang Qiang
MeeGo Team, Open source Technology Center, SSG, Intel