Re: Ubuntu shows updates / security updates on shell logins

2009-11-07 Thread Anders Rayner-Karlsson
* James Antill [20091106 16:14]: > On Wed, 2009-11-04 at 16:50 +, Richard W.M. Jones wrote: > > Newly installed Ubuntu 9.10, when you log in over ssh you may see: > > > > 34 packages can be updated. > > 10 updates are security updates. > > > > I think this is a nice feature, because many

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Seth Vidal
On Wed, 4 Nov 2009, Chris Adams wrote: Once upon a time, Seth Vidal said: i don't think it is a security risk. Or rather - if it is then the rpmdb should not be readable by non-root users. If knowing installed versions are a security risk, then so is "uname -r" and almost any command that

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Chris Adams
Once upon a time, Seth Vidal said: > i don't think it is a security risk. Or rather - if it is then the rpmdb > should not be readable by non-root users. If knowing installed versions are a security risk, then so is "uname -r" and almost any command that takes "-v" to display the version. -- Ch

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Konstantin Ryabitsev
2009/11/4 Kevin Kofler : > Richard June wrote: >> It's a good idea for one off jobs where the primary user is also the >> admin, but not so good for shared systems. Personally I think a better >> plan would be to display that information *only* if the user is >> flagged as an administrator, group r

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Seth Vidal
On Wed, 4 Nov 2009, Kevin Kofler wrote: Richard June wrote: It's a good idea for one off jobs where the primary user is also the admin, but not so good for shared systems. Personally I think a better plan would be to display that information *only* if the user is flagged as an administrator,

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Richard June
On Wed, Nov 4, 2009 at 12:38 PM, Kevin Kofler wrote: > Richard June wrote: >> It's a good idea for one off jobs where the primary user is also the >> admin, but not so good for shared systems. Personally I think a better >> plan would be to display that information *only* if the user is >> flagged

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Juan Rodriguez
On Wed, Nov 4, 2009 at 12:38 PM, Kevin Kofler wrote: > It's actually a security risk to display this to non-admin users. It's like > putting a sticker on your door saying "This door is not locked because my > keyhole is not working." > By that logic, Packagekit displaying that to endusers is the

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Kevin Kofler
Richard June wrote: > It's a good idea for one off jobs where the primary user is also the > admin, but not so good for shared systems. Personally I think a better > plan would be to display that information *only* if the user is > flagged as an administrator, group root, wheel, etc. It's actually

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Richard June
On Wed, Nov 4, 2009 at 11:02 AM, Jason L Tibbitts III wrote: >> "RWMJ" == Richard W M Jones writes: > > RWMJ> Newly installed Ubuntu 9.10, when you log in over ssh you may see: > RWMJ> 34 packages can be updated. 10 updates are security updates. > > What a terrible idea.  My users, who are we

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Richard W.M. Jones
On Wed, Nov 04, 2009 at 11:57:29AM -0500, Seth Vidal wrote: > On Wed, 4 Nov 2009, Richard W.M. Jones wrote: >> Newly installed Ubuntu 9.10, when you log in over ssh you may see: >> >> 34 packages can be updated. >> 10 updates are security updates. >> >> I think this is a nice feature, because man

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Jason L Tibbitts III
> "RWMJ" == Richard W M Jones writes: RWMJ> Newly installed Ubuntu 9.10, when you log in over ssh you may see: RWMJ> 34 packages can be updated. 10 updates are security updates. What a terrible idea. My users, who are welcome to ssh into a number of machines at my site, have no need to see

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Seth Vidal
On Wed, 4 Nov 2009, Richard W.M. Jones wrote: Newly installed Ubuntu 9.10, when you log in over ssh you may see: 34 packages can be updated. 10 updates are security updates. I think this is a nice feature, because many administrators will log in to servers remotely over ssh and never see t

Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Richard W.M. Jones
Newly installed Ubuntu 9.10, when you log in over ssh you may see: 34 packages can be updated. 10 updates are security updates. I think this is a nice feature, because many administrators will log in to servers remotely over ssh and never see the graphical indications from packagekit et al.