diff options
author | Julian Andres Klode <jak@debian.org> | 2018-02-19 15:06:06 +0000 |
---|---|---|
committer | Julian Andres Klode <jak@debian.org> | 2018-02-19 15:06:06 +0000 |
commit | 928ecff984be22632c27a69e072741e74491292c (patch) | |
tree | f0d760cc2da3841b90e7f067fd39dbc355c971c8 /doc/apt.conf.5.xml | |
parent | 13c85c9cec9e071e90ea190a74cbaabe7c51024c (diff) | |
parent | 9e5899cac1a6367e3769af52a724821880e538f6 (diff) |
Merge branch 'pu/not-valid-before' into 'master'
Check that Date of Release file is not in the future
See merge request apt-team/apt!3
Diffstat (limited to 'doc/apt.conf.5.xml')
-rw-r--r-- | doc/apt.conf.5.xml | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/doc/apt.conf.5.xml b/doc/apt.conf.5.xml index fdcd99425..e285b3130 100644 --- a/doc/apt.conf.5.xml +++ b/doc/apt.conf.5.xml @@ -315,6 +315,27 @@ APT::Compressor::rev { for the download itself (see also &sources-list;).</para> <variablelist> + <varlistentry><term><option>Check-Date</option></term> + <listitem><para> + Security related option defaulting to true, enabling time-related + checks. Disabling it means that the machine's time cannot be + trusted, and APT will hence disable all time-related checks, + such as <option>Check-Valid-Until</option> and verifying that + the Date field of a release file is not in the future. + </para></listitem> + </varlistentry> + + <varlistentry><term><option>Max-FutureTime</option></term> + <listitem><para>Maximum time (in seconds) before its creation (as indicated + by the <literal>Date</literal> header) that the <filename>Release</filename> + file should be considered valid. + + The default value is <literal>10</literal>. + Archive specific settings can be made by appending the label of the archive + to the option name. Preferably, the same can be achieved for specific + &sources-list; entries by using the <option>Date-Max-Future</option> option there. + </para></listitem> + </varlistentry> <varlistentry><term><option>Check-Valid-Until</option></term> <listitem><para> Security related option defaulting to true, as giving a Release file's |