Re: question about the security of entries in sources.list
On Tue, 3 Dec 2002 16:30:06 -0500,
sean finney wrote:
[...]
> while i'm not as concerned with servers like ftp.us.debian.org
> being compromised (though it is a concern to the pessimist),
> i'd like to make sure that the extra sources.list entries i've
> put in for other things (like, say blackdown) don't do more
> than for what i've put them in. is there any way to limit what
> packages could be downloaded from what sites?
I remember reading somewhere that it would be easier to trojan
programs by simply having the requested download redirected to a
malicious server (by fooling around with the DNS stuff).
Reply to: