Component: Ubuntu apt repository
Defined in model.py:284
Threats Affecting This Component
| Threat | Status | Risk | After mitigations | Mitigations |
|---|---|---|---|---|
| Malicious apt package installed at install-time or during updates THREAT36 | mitigated | 6 medium | 6 medium | apt performs GPG signature verification as long as it's not explicitly disabled |
| Vulnerabilities maliciously introduced in APT packages THREAT159 | accepted | 6 medium | 3 low | SecureDrop uses as few apt packages as possible.; Only packages in the security channel get updates |
| Ubuntu APT Repo compromised THREAT45 | partially mitigated | 3 low | 3 low | apt performs GPG signature verification as long as it's not explicitly disabled |