[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#833785: apt: please add configuration option to never allow installation of unauthenticated packages



Package: apt
Version: 1.3~pre3
Severity: wishlist

Hi,

thanks for maintaing apt, it's really really awesome! 

There is a trivial attack on apt: press "y" on the "do you really want to
install  those unauthenticated packages?" question and there is no way to
prevent people from doing so (by means of configuration), like a strict mode.

Please implement something along these lines, I've heard this is a
blocker for wider Debian adoption by some people/projects/organisations.


-- 
cheers,
	Holger

Attachment: signature.asc
Description: Digital signature


Reply to: