commit:     806f6a024c93975c1b7cbdcbca8744633da24bc3
Author:     Zac Medico <zmedico <AT> gentoo <DOT> org>
AuthorDate: Sat Nov 15 22:26:34 2025 +0000
Commit:     Zac Medico <zmedico <AT> gentoo <DOT> org>
CommitDate: Sat Nov 15 23:16:12 2025 +0000
URL:        https://gitweb.gentoo.org/proj/portage.git/commit/?id=806f6a02

bintree: don't call trust helper without sufficient privileges

Bug: https://bugs.gentoo.org/920180
Signed-off-by: Zac Medico <zmedico <AT> gentoo.org>

 lib/portage/dbapi/bintree.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/portage/dbapi/bintree.py b/lib/portage/dbapi/bintree.py
index 257343edf8..3f8c09eef2 100644
--- a/lib/portage/dbapi/bintree.py
+++ b/lib/portage/dbapi/bintree.py
@@ -1367,7 +1367,7 @@ class binarytree:
             # when binpackages are involved, not only when we refuse unsigned
             # ones. (If the keys have expired we end up refusing signed but
             # technically invalid packages...)
-            if not pretend and self.dbapi.writable:
+            if not pretend and self.dbapi.writable and portage.data.secpass >= 
2:
                 self._run_trust_helper()
             gpkg_only = True
         else:

Reply via email to