Component: DZ Linux package server

FPF package servers for APT/YUM repos, operated by FPF infra

boundary: Internet is backed up is exposed is reviewed is verifiable publishes code uses network uses strong credentials

Potential Mitigations

Properties not currently implemented that would mitigate applicable threats:

is sandboxed works offline

Threats Affecting This Component

Threat ID Name Description Potential Mitigations
CAPEC-639 Probe System Files An adversary obtains unauthorized information due to improperly protected files. If an application stores sensitive information in a file that is not protected by proper access control, then an adversary can access the file and search for sensitive information. is sandboxed
CAPEC-582 Route Disabling An adversary disables the network route between two targets. The goal is to completely sever the communications channel between two entities. This is often the result of a major error or the use of an Internet kill switch by those in control of critical infrastructure. This attack pattern differs from most other obstruction patterns by targeting the route itself, as opposed to the data passed over the route. works offline

Scenarios Using This Component

Back to Components List | Back to Summary