[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Ayatana] Possible security risk with update-manager



I don't think that mac_v is proposing /automated/ updates, so much as he is proposing that the current update scheme should not require the administrator's password. The administrator would still be notified of new updates as they are now, and they would have to decide when to download and install the updates, however they would no longer have to confirm their administrator status prior to update installation.

-S

On Tue, Dec 15, 2009 at 7:27 AM, Scott Kitterman <ubuntu@xxxxxxxxxxxxx> wrote:
On Tue, 15 Dec 2009 15:14:33 +0530 mac_v <drkvi-a@xxxxxxxxx> wrote:
>Why is updating harmful? Aernt the Stable release updates supposed to be
>pain-free?
>
That's an interesting theory.  No system update is risk free.  They should
not be automatically imposed on users unless they have opted into  such a
scheme.

As an example, personally I don't update my laptop when I'm away from home
(except if there were a really serious security update).

We test updates, but they are not, and cannot be, risk free.

Scott K

_______________________________________________
Mailing list: https://launchpad.net/~ayatana
Post to     : ayatana@xxxxxxxxxxxxxxxxxxx
Unsubscribe : https://launchpad.net/~ayatana
More help   : https://help.launchpad.net/ListHelp



--
Scott Armitage, B.A.Sc., M.A.Sc. candidate
Space Flight Laboratory
University of Toronto Institute for Aerospace Studies
4925 Dufferin Street, Toronto, Ontario, Canada, M3H 5T6