Re: Ubuntu shows updates / security updates on shell logins

2009-11-07 Thread Anders Rayner-Karlsson
* James Antill ja...@fedoraproject.org [20091106 16:14]: On Wed, 2009-11-04 at 16:50 +, Richard W.M. Jones wrote: Newly installed Ubuntu 9.10, when you log in over ssh you may see: 34 packages can be updated. 10 updates are security updates. I think this is a nice feature,

Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Richard W.M. Jones
Newly installed Ubuntu 9.10, when you log in over ssh you may see: 34 packages can be updated. 10 updates are security updates. I think this is a nice feature, because many administrators will log in to servers remotely over ssh and never see the graphical indications from packagekit et al.

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Seth Vidal
On Wed, 4 Nov 2009, Richard W.M. Jones wrote: Newly installed Ubuntu 9.10, when you log in over ssh you may see: 34 packages can be updated. 10 updates are security updates. I think this is a nice feature, because many administrators will log in to servers remotely over ssh and never see

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Jason L Tibbitts III
RWMJ == Richard W M Jones rjo...@redhat.com writes: RWMJ Newly installed Ubuntu 9.10, when you log in over ssh you may see: RWMJ 34 packages can be updated. 10 updates are security updates. What a terrible idea. My users, who are welcome to ssh into a number of machines at my site, have no

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Richard W.M. Jones
On Wed, Nov 04, 2009 at 11:57:29AM -0500, Seth Vidal wrote: On Wed, 4 Nov 2009, Richard W.M. Jones wrote: Newly installed Ubuntu 9.10, when you log in over ssh you may see: 34 packages can be updated. 10 updates are security updates. I think this is a nice feature, because many

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Richard June
On Wed, Nov 4, 2009 at 11:02 AM, Jason L Tibbitts III ti...@math.uh.edu wrote: RWMJ == Richard W M Jones rjo...@redhat.com writes: RWMJ Newly installed Ubuntu 9.10, when you log in over ssh you may see: RWMJ 34 packages can be updated. 10 updates are security updates. What a terrible idea.  

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Kevin Kofler
Richard June wrote: It's a good idea for one off jobs where the primary user is also the admin, but not so good for shared systems. Personally I think a better plan would be to display that information *only* if the user is flagged as an administrator, group root, wheel, etc. It's actually a

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Juan Rodriguez
On Wed, Nov 4, 2009 at 12:38 PM, Kevin Kofler kevin.kof...@chello.atwrote: It's actually a security risk to display this to non-admin users. It's like putting a sticker on your door saying This door is not locked because my keyhole is not working. By that logic, Packagekit displaying that to

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Richard June
On Wed, Nov 4, 2009 at 12:38 PM, Kevin Kofler kevin.kof...@chello.at wrote: Richard June wrote: It's a good idea for one off jobs where the primary user is also the admin, but not so good for shared systems. Personally I think a better plan would be to display that information *only* if the

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Seth Vidal
On Wed, 4 Nov 2009, Kevin Kofler wrote: Richard June wrote: It's a good idea for one off jobs where the primary user is also the admin, but not so good for shared systems. Personally I think a better plan would be to display that information *only* if the user is flagged as an administrator,

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Konstantin Ryabitsev
2009/11/4 Kevin Kofler kevin.kof...@chello.at: Richard June wrote: It's a good idea for one off jobs where the primary user is also the admin, but not so good for shared systems. Personally I think a better plan would be to display that information *only* if the user is flagged as an

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Chris Adams
Once upon a time, Seth Vidal skvi...@fedoraproject.org said: i don't think it is a security risk. Or rather - if it is then the rpmdb should not be readable by non-root users. If knowing installed versions are a security risk, then so is uname -r and almost any command that takes -v to display

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Seth Vidal
On Wed, 4 Nov 2009, Chris Adams wrote: Once upon a time, Seth Vidal skvi...@fedoraproject.org said: i don't think it is a security risk. Or rather - if it is then the rpmdb should not be readable by non-root users. If knowing installed versions are a security risk, then so is uname -r and