Ensure gpg-pubkey packages not having OS and ARCH

As those are special make sure that actually are and did not get installed as a normal rpm package - whihc do noot ARCH and OS set.
ffesti · Nov 29, 2024 · 01921c7 · 01921c7
1 parent 5954bac
commit 01921c7
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/lib/keystore.cc b/lib/keystore.cc
@@ -248,6 +248,11 @@ rpmRC keystore_rpmdb::load_keys(rpmtxn txn, rpmKeyring keyring)
 	struct rpmtd_s pubkeys;
 	const char *key;
 
+	/* don't allow regularly installed gpg-pubkey packages */
+	if (headerIsEntry(h, RPMTAG_ARCH) || headerIsEntry(h, RPMTAG_OS)) {
+	    continue;
+	}
+
 	if (!headerGet(h, RPMTAG_PUBKEYS, &pubkeys, HEADERGET_MINMEM))
 	   continue;