EXALAB/AnLinux-App

enable debian-security by default in sources.list

jindam-vani opened this issue · 5 comments

jindam-vani commented

  • i havent saved my sources.list but it seems debian
    security repo is missing?

  • ideally i would have:

deb http://deb.debian.org/debian bullseye main contrib non-free
deb http://deb.debian.org/debian-security/ bullseye-security main contrib non-free

#deb-src http://deb.debian.org/debian bullseye main contrib non-free
#deb-src http://deb.debian.org/debian-security/ bullseye-security main contrib non-free
  • wishlist:
deb http://deb.debian.org/debian bullseye main contrib non-free
deb http://deb.debian.org/debian-security/ bullseye-security main contrib non-free
deb http://deb.debian.org/debian bullseye-updates main contrib non-free
deb http://deb.debian.org/debian bullseye-backports main contrib non-free

#deb-src http://deb.debian.org/debian bullseye main contrib non-free
#deb-src http://deb.debian.org/debian-security/ bullseye-security main contrib non-free
#deb-src http://deb.debian.org/debian bullseye-updates main contrib non-free
#deb-src http://deb.debian.org/debian bullseye-backports main contrib non-free
exalab999 commented

These will be added in the distro update today, along with Ubuntu sources.list update.

jindam-vani commented
  • this will be rude.....
    dont label Feature Request for enabling security updates. first and last, excluding security repo is grave mistake..... for an average user & may or may not implications for exclusion.....
  • debian & its derivates must have security repo enabled by default bcoz it is not rolling release....
  • i care about security, promptly informed you...
exalab999 commented

@jindam-vani

There's nothing rude in your words.

  1. I think this issue is better labeled as bugs, thanks for the notify. The devs are aware of the default sources.list problems and are working to fix it in the next release, this is the developer's mistake, so no excuse here, however the security risk is minimized even without the security repo since the distro is running inside proot environment.
  2. Yes, you are right, but we understand how the repo works.
  3. These will be added in the distro update today, along with Ubuntu sources.list update. as stated above, the update and fix will be published later, thanks for your informing.

To Add up to this, this project is currently maintained at a 6 month life cycle (If no emergency bug occured).

jindam-vani commented
exalab999 commented

Yes, the new included security source in debian is:

deb http://security.debian.org/debian-security bullseye-security main contrib non-free

sources.list update apply as well for all apt based distro except Kali which including backports and a few other things.