don't bug people without admin privileges

Bug #1024178 reported by sds
20
This bug affects 4 people
Affects Status Importance Assigned to Milestone
update-manager (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

the user who is not an admin should never be bothered about updates.
when a non-admin user FOO tried to tell update-manager to "never" check for updates,
he is asked for a password for the admin BAR account.
this is absurd!
there is a reason why FOO is not an admin; if he had password for BAR, he would have been an admin himself!
I mark this bug as a security issue because it pushes the users towards the insecure practice of password sharing.

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: update-manager 1:0.156.14.5
ProcVersionSignature: Ubuntu 3.2.0-26.41-generic 3.2.19
Uname: Linux 3.2.0-26-generic x86_64
ApportVersion: 2.0.1-0ubuntu8
Aptdaemon:

Architecture: amd64
Date: Thu Jul 12 23:04:29 2012
GsettingsChanges:
 com.ubuntu.update-manager first-run false
 com.ubuntu.update-manager launch-time 1342095015
 com.ubuntu.update-manager show-details true
 com.ubuntu.update-manager window-height 600
 com.ubuntu.update-manager window-width 600
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012)
PackageArchitecture: all
SourcePackage: update-manager
UpgradeStatus: Upgraded to precise on 2012-05-01 (72 days ago)

Revision history for this message
sds (sds-gnu) wrote :
security vulnerability: yes → no
visibility: private → public
Revision history for this message
Jeremy Bícha (jbicha) wrote :

See also bug 876448 which complains about the New Release Available pop-up for non-admins.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in update-manager (Ubuntu):
status: New → Confirmed
Revision history for this message
sds (sds-gnu) wrote :

this behavior inevitably affects all boxes with non-admin users.
the problem is that non-admin users are unlikely to have a lauchpad account to complain about this.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.