documentation_complete: true

title: 'Disable unauthenticated repositories in APT configuration'

description: 'Unauthenticated repositories should not be used for updates.'

rationale: |-
    Repositories hosts all packages that will be installed on the system during update.
        If a repository is not authenticated, the associated packages can't be trusted,
        and then should not be installed locally.

severity: unknown

references:
    srg: SRG-OS-000366-GPOS-00153
