sergio/takana
> Una distribución Linux construida con un laboratorio funcional y hermético en el > sótano, y una terminal mutable, clásica y anárquica en el piso de arriba — diseñada > desde el suelo para que una IA programadora entienda, modifique y co…
⎇ 7f2ebdbb8b27ff40d6f670f8e7767f58b1bbc2bf
recipes/0420-gpg-drop-import-clean-from-default-keyserver-import-options.patch
Ñawpa willay
ch'uya
base-system-3: promover cadena crypto + libusb/usbutils + gnupg (índice 743)
1From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
2Date: Mon, 15 Jul 2019 16:24:35 -0400
3Subject: gpg: drop import-clean from default keyserver import options
4
5* g10/gpg.c (main): drop IMPORT_CLEAN from the
6default opt.keyserver_options.import_options
7* doc/gpg.texi: reflect this change in the documentation
8
9Given that SELF_SIGS_ONLY is already set, it's not clear what
10additional benefit IMPORT_CLEAN provides. Furthermore, IMPORT_CLEAN
11means that receiving an OpenPGP certificate from a keyserver will
12potentially delete data that is otherwise held in the local keyring,
13which is surprising to users who expect retrieval from the keyservers
14to be purely additive.
15
16GnuPG-Bug-Id: 4628
17Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
18---
19 doc/gpg.texi | 2 +-
20 g10/gpg.c | 3 +--
21 2 files changed, 2 insertions(+), 3 deletions(-)
22
23Patch-Source: https://sources.debian.org/data/main/g/gnupg2/2.2.27-2/debian/patches/gpg-drop-import-clean-from-default-keyserver-import-optio.patch
24
25diff --git a/doc/gpg.texi b/doc/gpg.texi
26index 804ecf9..b238278 100644
27--- a/doc/gpg.texi
28+++ b/doc/gpg.texi
29@@ -2047,7 +2047,7 @@ are available for all keyserver types, some common options are:
30
31 @end table
32
33-The default list of options is: "self-sigs-only, import-clean,
34+The default list of options is: "self-sigs-only,
35 repair-keys, repair-pks-subkey-bug, export-attributes". However, if
36 the actual used source is an LDAP server "no-self-sigs-only" is
37 assumed unless "self-sigs-only" has been explicitly configured.
38diff --git a/g10/gpg.c b/g10/gpg.c
39index 68c0454..205de60 100644
40--- a/g10/gpg.c
41+++ b/g10/gpg.c
42@@ -2441,8 +2441,7 @@ main (int argc, char **argv)
43 | IMPORT_REPAIR_PKS_SUBKEY_BUG
44 | IMPORT_SELF_SIGS_ONLY
45 | IMPORT_COLLAPSE_UIDS
46- | IMPORT_COLLAPSE_SUBKEYS
47- | IMPORT_CLEAN);
48+ | IMPORT_COLLAPSE_SUBKEYS);
49 opt.keyserver_options.export_options = EXPORT_ATTRIBUTES;
50 opt.keyserver_options.options = 0;
51 opt.verify_options = (LIST_SHOW_UID_VALIDITY