From 7d79fa759428099c0e0a9bbb2cb785032fa2279b Mon Sep 17 00:00:00 2001 From: Petr Bokoc Date: Tue, 28 Oct 2025 09:05:43 +0100 Subject: [PATCH] 219 - Debuginfod IMA verification --- modules/release-notes/pages/developers.adoc | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/modules/release-notes/pages/developers.adoc b/modules/release-notes/pages/developers.adoc index 11ba5ce..6cfae14 100644 --- a/modules/release-notes/pages/developers.adoc +++ b/modules/release-notes/pages/developers.adoc @@ -182,3 +182,9 @@ The `async-std` Rust crate is no longer maintained and is now considered depreca === gtk3-rs, gtk-rs-core v0.18, and gtk4-rs v0.7 are now removed The Rust bindings for GTK3 (and related libraries) were marked as deprecated in Fedora 43 due to lack of upstream maintenance. In Fedora 43, they are completely removed. + +[[debuginfod-ima-verification]] +== Debuginfod IMA verification +The `debuginfod` client tools used to auto-download debuginfo & source code into tools like `gdb` now cryptographically verify the integrity of the downloaded files from the Fedora debuginfod server. +This setting is appropriate for normal Fedora koji-signed release/update RPMs. +However if your workflow also involves unsigned flatpak RPMs (`++%dist ".fc#app#"++`), then you may need to manually remove `ima:enforcing` from your `$DEBUGINFOD_URLS`.