Will SuSE 7.1 contain full signing and will it include autorpm, or is the software still too beta?
Yes and yes. In addition to that, YaST2 will also have an update module.
LenZ --
Will YaST's update module default to checking signatures and warn/stop the user if they do not match, Mandrake's tool currently does this, I think it is a good feature as it embraces the whole "secure by default" concept. And if the RPM's GnuPG sig doesn't matter that means the RPM is either corrupt, or worse an attacker is up to something.
------------------------------------------------------------------ Lenz Grimmer SuSE GmbH
Kurt Seifried, seifried@securityportal.com Securityportal - your focal point for security on the 'net