Mirror-Tampering
2 tutorials in this category.
02
How to Detect Mirror Tampering with APT, Yum, and DNF Hash-Chain Provenance
Enable end-to-end clearsigned InRelease + repomd.xml.asc verification for OS package mirrors by configuring the trust-root keyring.
07
How to Enable Checksum Fail-Closed Enforcement
Block silently swapped upstream packages by switching CHAINSAW_CHECKSUM_MODE from log to quarantine or block.