apt-get install --assume-yes allows unverified packages

[Lars Noodén]

Binary package hint: apt

Using the '--assume-yes' option, apt-get keeps rolling even if the repository (or a host pretending to be the repository) starts serving up packages that cannot be verified.

Technically --assume-yes does answer yes to everything. However, in this day and age with so many MIM and other attacks I would expect that it would throw an error unless accompanied by some --force option.

It looks like automated installs relying on --assume-yes can then be fed tainted or compromised packages.

[Kees Cook (kees)]

mvo, does update-manager use apt in this way?

[Launchpad Janitor (janitor)]

[Expired for apt (Ubuntu) because there has been no activity for 60 days.]

[Jamie Strandboge (jdstrand)]

@Michael, what is the status of this bug? (see question in comment #1)

[Julian Andres Klode (juliank)]

Fixed in natty.

(natty)root@jak-thinkpad:/home/jak# apt-key del 437D05B5
OK
(natty)root@jak-thinkpad:/home/jak# apt-get update
[...]
(natty)root@jak-thinkpad:/home/jak# apt-get install --assume-yes cdbs
[...]
WARNING: The following packages cannot be authenticated!
  fdupes python-scour cdbs
E: There are problems and -y was used without --force-yes