> It looks like the passenger RPM has a script importing the GPG key. Check using "rpm -q --scripts passenger". >From what I can see, it doesn't: # rpm -q --scripts passenger postinstall scriptlet (using /bin/sh): if /usr/sbin/sestatus | grep 'SELinux status' | grep -q enabled; then actual_selinux_variants=; for selinux_policy_file in /etc/selinux/*/policy; do selinux_policy_dir=$(dirname ${selinux_policy_file}); actual_selinux_variants="$actual_selinux_variants $(basename ${selinux_policy_dir})"; done; actual_selinux_variants=$(echo ${actual_selinux_variants}); if [ -z "${actual_selinux_variants}" ]; then actual_selinux_variants=targeted; fi for selinuxvariant in ${actual_selinux_variants}; do if [ -e /usr/share/selinux/${selinuxvariant}/passenger.pp ]; then echo "Installing Passenger SELinux policy for the $selinuxvariant variant" /usr/sbin/semodule -s ${selinuxvariant} -i \ /usr/share/selinux/${selinuxvariant}/passenger.pp || : fi done /sbin/fixfiles -R passenger restore || : /sbin/restorecon -R /usr/lib64/passenger/support-binaries || : fi postuninstall scriptlet (using /bin/sh): if [ $1 -eq 0 ] ; then actual_selinux_variants=; for selinux_policy_file in /etc/selinux/*/policy; do selinux_policy_dir=$(dirname ${selinux_policy_file}); actual_selinux_variants="$actual_selinux_variants $(basename ${selinux_policy_dir})"; done; actual_selinux_variants=$(echo ${actual_selinux_variants}); if [ -z "${actual_selinux_variants}" ]; then actual_selinux_variants=targeted; fi for selinuxvariant in ${actual_selinux_variants}; do /usr/sbin/semodule -s ${selinuxvariant} -r passenger &> /dev/null || : done /sbin/fixfiles -R passenger restore || : [ -d /usr/lib64/passenger/support-binaries ] && \ /sbin/restorecon -R /usr/lib64/passenger/support-binaries &> /dev/null || : fi It more looks like yum wants confirmation for some reason. Regards, Yuri