From: Michael Prokop <mika@grml.org>
Date: Tue, 9 Jun 2015 22:02:02 +0000 (+0200)
Subject: Drop --force-yes option from chroot-scripts' apt-get usage
X-Git-Tag: v0.72~2
X-Git-Url: https://git.grml.org/?p=grml-debootstrap.git;a=commitdiff_plain;h=0592c21f3db581e9910c3fc8ac9f5a603551b0bc;hp=1cf8447b1ef2791892fbd51f1cd49406850a93df;ds=sidebyside

Drop --force-yes option from chroot-scripts' apt-get usage

The --force-yes option may lead to installation of packages that
fail GPG verification checks. If someone really needs the
--force-yes option (to actually really force package
installation) then this should be handled via DPKG_OPTIONS
instead.

Fixes #62 @ github
---

diff --git a/chroot-script b/chroot-script
index 0e31f70..e14ca21 100755
--- a/chroot-script
+++ b/chroot-script
@@ -36,9 +36,9 @@ if [ -x /usr/bin/aptitude ] ; then
       APTUPGRADE="aptitude -y safe-upgrade $DPKG_OPTIONS"
    fi
 else
-   APTINSTALL="apt-get --force-yes -y --no-install-recommends install $DPKG_OPTIONS"
+   APTINSTALL="apt-get -y --no-install-recommends install $DPKG_OPTIONS"
    APTUPDATE="apt-get update $DPKG_OPTIONS"
-   APTUPGRADE="apt-get --force-yes -y upgrade $DPKG_OPTIONS"
+   APTUPGRADE="apt-get -y upgrade $DPKG_OPTIONS"
 fi
 
 if [ -z "$STAGES" ] ; then