On 2013-06-17 17:51, Bob Proulx wrote:
Chris Capon wrote:
Since upgrading to Debian Stable (Wheezy), the Gnome desktop has a
popup which occurs at least once a day asking for authentication.
The exact message is:
Authentication is required to update packages
This sounds like Bug#708548. This thread on debian-devel is
concerning this problem.
http://lists.debian.org/debian-devel/2013/06/msg00341.html
No resolution yet. But it is a big problem because it is training
people to fall prey to phishing attacks.
Bob
I agree with the bug report. When a user initiates an action (like
launching Synaptic) having a security prompt request credentials is fine
because its intuitive. For system generated actions which just show up
at arbitrary times, there should be a clear way of letting the user know
which software package is making the request. Otherwise, the security is
pointless because the user is simply going to have to guess one way or
the other in the end.
For those with the same problem, I found a solution:
- From the Gnome desktop, go to Activities, Applications, System Tools.
- Launch the icon called "Software Settings".
- Select the "Update Settings" tab.
- Set the "Check for updates" setting to "Never".
- Set the "Automatically install" setting to "Nothing".
Each of the two settings seem to work independently from the other, so
they were both responsible for one security prompt each. Be aware, this
will disable some sort of software update checking by Gnome. The Gnome
update process may possibly be using the PackageKit and PolicyKit
infrastructure, and is also different from "update-manager" (which
doesn't do these security prompts). Very confusing. Personally, I use
a shell script which calls apt-get to keep things simple.
Anyway, thanks to all who helped point me in the right direction.
Cheers.
--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/51c46c5c.4000...@gmail.com