docs: Note not to put private keys in /usr/share/ostree

https://bugzilla.gnome.org/show_bug.cgi?id=757524
This commit is contained in:
Colin Walters 2015-11-07 21:15:20 -05:00
parent 438e21e858
commit efdb4d8f44

View File

@ -425,10 +425,12 @@ Boston, MA 02111-1307, USA.
<title>GPG verification</title>
<para>
OSTree supports signing commits with GPG. The
set of trusted keys is stored as keyring files in
<filename>/usr/share/ostree/trusted.gpg.d</filename>. Any key in
any keyring in that directory may be used to sign commits.
OSTree supports signing commits with GPG. The set of
trusted public keys is stored as keyring files in
<filename>/usr/share/ostree/trusted.gpg.d</filename>. Any
public key in a keyring file in that directory will be
trusted by the client. No private keys should be present
in this directory.
</para>
</refsect1>