apt performs GPG signature verification as long as it's not explicitly disabled implemented
MITIG167 · Implemented: In place. · Defined in mitigations.py:492
Threats it mitigates
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Malicious apt package installed at install-time or during updates THREAT36 | mitigated | 6 medium | 6 medium |
| Hardware Firewall Supply chain attack THREAT150 | accepted | 4 medium | 4 medium |
| Ubuntu APT Repo compromised THREAT45 | partially mitigated | 3 low | 3 low |
| Vulnerabilities/Compromise of Hardware Firewall THREAT48 | mitigated | 4 medium | 2 low |