documentation_complete: true

title: 'Disable unauthenticated repositories in APT configuration'

description: 'Unauthenticated repositories should not be used for updates.'

rationale: |-
    Repositories hosts all packages that will be intsalled on the system during update.
        If a repository is not authenticated, the associated packages can't be trusted,
        and then should not be installed localy.

severity: unknown

references:
    anssi: NT28(R15)
