Re: [Ayatana] Possible security risk with update-manager

[Alan Pope <alan@xxxxxxxxx>]

2009/12/15 mac_v <drkvi-a@xxxxxxxxx>:
> Why ask the admin password?
> - Update manager is designed to be shown only for admin accounts and
> doesnt show up for non-admins.

Indeed. I prefer the OSX way which asks for a user _and_ a password.
This fits my use case which has my daughter using the Mac to surf the
web. If she stumbles upon a blocked site she can click a link to allow
it, come and get me and I'll type in my name and password to unlock
that site.

> - Admin User has already approved software source and accepted it as a
> trusted source when they add the repo sources to the list.
>
> Why this extra step for a simple update process?
>

There could be a significant time delta between adding software
sources and updating the machine. If I was called away from my machine
and update manager popped up, I'd rather my 3 year old Son didn't stab
the install button and add the updates. I want some kind of security
confirmation.

Cheers,
Al.