[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Ubuntu shows updates / security updates on shell logins





On Wed, 4 Nov 2009, Kevin Kofler wrote:

Richard June wrote:
It's a good idea for one off jobs where the primary user is also the
admin, but not so good for shared systems. Personally I think a better
plan would be to display that information *only* if the user is
flagged as an administrator, group root, wheel, etc.

It's actually a security risk to display this to non-admin users. It's like
putting a sticker on your door saying "This door is not locked because my
keyhole is not working."


i don't think it is a security risk. Or rather - if it is then the rpmdb should not be readable by non-root users.

-sv


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]