Very Computer

I'm running Mandrake 9.0 using the gpg 1.0.7 that comes with it.

I'm trying to run MandrakeUpdate, but I get the following warnings
after it downloads the first RPM of the set I indicate I want to
install:

    The signature of the package 'tar-1.13.25-6.2mdk.i586.rpm' is not correct:

    gpg: Warning: unsafe ownership on file "/home/terry/.gnupg/options"
    gpg: Warning: unsafe ownership on file "/home/terry/.gnupg/options"
    gpg: Warning: unsafe ownership on file "/home/terry/.gnupg/options"
    gpg: Signature made Thu 10 Oct 2002 01:37:14 PM EDT using DSA key ID 22458A98
    gpg: Can't check signature: public key not found

    Do you want to install it anyway?

And I answer no.

It looks like the first line of output is generic (i.e., printed
because gpg is exiting non-zero) so is likely not accurate.

Can someone tell me how to make the gpg warnings go away and/or how to
make gpg find the public key it needs?

I'd rather not simply arrange for gpg to be called with
--no-permission-warning. I want to know why it's giving that message
and what's unsafe about my setup. My ~/.gnupg has mode 700 and the
files in it have mode 600 and all are user & group owned by me.

Can anyone tell me what's going on with gpg that it thinks this setup
is unsafe?

Terry.

Quote:

> I'm running Mandrake 9.0 using the gpg 1.0.7 that comes with it.

> I'm trying to run MandrakeUpdate, but I get the following warnings
> after it downloads the first RPM of the set I indicate I want to
> install:

>     The signature of the package 'tar-1.13.25-6.2mdk.i586.rpm' is not correct:

>     gpg: Warning: unsafe ownership on file "/home/terry/.gnupg/options"
>     gpg: Warning: unsafe ownership on file "/home/terry/.gnupg/options"
>     gpg: Warning: unsafe ownership on file "/home/terry/.gnupg/options"
>     gpg: Signature made Thu 10 Oct 2002 01:37:14 PM EDT using DSA key ID 22458A98
>     gpg: Can't check signature: public key not found

>     Do you want to install it anyway?

> And I answer no.

[..]
> Can anyone tell me what's going on with gpg that it thinks this setup
> is unsafe?

        gpg --recv-keys 22458A98

If it doesn't fetch the key, try inserting a keyserver in
~/.gnupg/options.  I use:

        keyserver wwwkeys.nl.pgp.net

Also examine the keyserver-options line; inparticular
auto-key-retrieve.

--
Lee John Moore                 Powered by Gentoo
http://www.leej.dsl.pipex.com  [Portage  2.0.43]
-------------------------------------------------
"Turn on, tune up, rock out." -- Billy Gibbons