Comment 1 for bug 1530251

Revision history for this message
aggelalex (aggelalex-ppa) wrote :

Taking ideas from OS X? Just kidding, anyway... :)

That's true, OS X has that feature in App Store, updating without a password.
But in Linux, things are different. Since eOS is based on Ubuntu, performing an update requires using apt. to make any changes using this tool requires root previllages (that's why it usually runs with the `sudo` prefix). Thus, one way to do this, is making the OS remember your password (in an encrypted file or whatsoever), and redirect it to sudo (`echo "mostpowerfullpasswordintheworld1234" | sudo -S apt upgrade`). However this would enable some envy hackers to just decode the file the same way the appstore does (they can se how from the source code) and steal it from you, pushing afterwards viruses to you that use sudo. Not so pleasant, is it?

In other words, such a feature would end up being a security vulnerability, which could make eOS much less secure. That's something that we don't want, is it?

#Dont_mess_with_sudo