Yes Packages contains pubkeys and thus read access is necessary.
The more interesting question is whether the access is done lazily (likely @rpm5.org), and how the lack of read access affects MANDATORY signature checking.
Yes Packages contains pubkeys and thus read access is necessary.
The more interesting question is whether the access is done lazily
(likely @rpm5.org), and how the lack of read access affects MANDATORY
signature checking.