From aba813975abb880f8b27d659147f7760c02f99e7 Mon Sep 17 00:00:00 2001 From: Julian Andres Klode Date: Tue, 27 Jun 2023 19:14:43 +0200 Subject: update: Add notice about missing Signed-By in deb822 sources We want to gently steer users towards having Signed-By for each source such that we can retire a shared keyring across sources which improves resilience against configuration issues and incompetent malicious actors. --- test/integration/test-apt-get-update-sourceslist-warning | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'test/integration') diff --git a/test/integration/test-apt-get-update-sourceslist-warning b/test/integration/test-apt-get-update-sourceslist-warning index 02e1ccb29..3a3cb2e9f 100755 --- a/test/integration/test-apt-get-update-sourceslist-warning +++ b/test/integration/test-apt-get-update-sourceslist-warning @@ -38,6 +38,17 @@ testsuccessequal "$BOILERPLATE" apt update --no-download echo 'deb-src http://example.org/debian bookworm main non-free' > rootdir/etc/apt/sources.list.d/example.list testsuccessequal "$BOILERPLATE" apt update --no-download +msgmsg 'Suggest Signed-By for deb822 sources.list(5) entries' +rm rootdir/etc/apt/sources.list.d/example.list +echo 'Types: deb +URIs: http://example.org/debian +Suites: bookworm +Components: main +' > rootdir/etc/apt/sources.list.d/example.sources +testsuccessequal "$BOILERPLATE +N: Missing Signed-By in the sources.list(5) entry for 'http://example.org/debian'" apt update --no-download +rm rootdir/etc/apt/sources.list.d/example.sources + msgmsg 'Is non-free-firmware missing?' echo 'deb http://example.org/debian bookworm main non-free' > rootdir/etc/apt/sources.list.d/example.list cat >> rootdir/var/lib/apt/lists/example.org_debian_dists_bookworm_non-free_binary-amd64_Packages <