Hi everyone 👋
From linux/apt_sources.cpp the apt sources seem to be missing information from files with the
.sources
extension. Osquery is only collecting data from
/etc/apt/sources.list
and
/etc/apt/sources.list.d/%.list
. Is there a reason for that or am I missing something?
s
Stefano Bonicatti
11/14/2023, 7:08 PM
It's likely an oversight, and the code in there is 6 years old.
They seem to have a "newer" format, which would need a modified parser, but also I still don't see them used with distros like Ubuntu and similar.
Would still make sense supporting them.