ksmarttray and updates

[Christoph Thiel]

On Sat, 12 Aug 2006, Andreas Hanke wrote:

> What would make sense from a usability point of view is:
> 
> a) Make smart-update 4755;
> 
> b) Remove X-KDE-SubstituteUID from ksmarttray.desktop so it doesn't ask
>    for the root password on each startup;
> 
> c) Maybe move smart-update into the ksmarttray RPM to make sure that
>    it's installed only on those systems where it's actually used. 
>    smart-update doesn't seem to be used by anything else than 
>    ksmarttray.

I'd like smart-update to stay in the main rpm.


> That's the way it is intended to be (as far as I know) and, assuming 
> that smart-update is safe for 4755, it could be even more secure than 
> the current solution because the user would no longer be tempted to run 
> ksmarttray itself as root.
> 
> You or someone else can always request that at bugzilla.novell.com, the 
> worst thing that can happen is that it's rejected.

Right ;) I'm taking this to our security team right now. Stay tuned.


Regards
	Christoph