What security policies exist in place for packages and scripts?
Originally I want(ed) to know how ubuntu update process is being secured against tampering ofpackages by a man in the middle. This has been this question here: Are Virus/rootkits via ubuntu updates possible? [closed]
It has been closed for being assumed to be a duplicate. Still the assumed duplicates cover some quite different topics (like how cd/flashdrive autorun etc effects safety etc.). So I post the question again. I seek an answer to how the updated process is secured against a man in the middle attack.
Pardon me for the potential annoyance, but the topic deeply interested me since there are quite many updates in ubuntu (at least one security update each week) and knowing what way this updates can be a path for malware is important to me.
Maybe somebody will be a nice fellow and able to bring some light to this question. I would also dearly appreciate that with some less ignorance the question will remain opened this time, for indeed it is not totally the covered by the questions:
- How is the system kept secure? (covers more the aspect of gaining root access)
and still not well enough in
- What security policies exist in place for packages and scripts? (covers the aspect of deb safety files being autorun)
neither of the "duplicates" covers the aspect how the update process is secured.