security updates don't get installed automatically

Asked by Nikolaus Rath

Binary package hint: update-manager

I have enabled "Install Security Updates without Confirmation" under System -> Administration -> Software Sources -> Updates. Nevertheless, update-manager still wants me to install some security updates manually. Right now, I have a red icon in the systray that recommends me to install the "Important Security Updates" for libperl5.8, openoffice-org-help-de and some other packages.

I am using Hardy.

sources.list is:

deb http://us.archive.ubuntu.com/ubuntu hardy main restricted universe multiverse
deb http://us.archive.ubuntu.com/ubuntu hardy-updates main restricted universe multiverse
deb http://security.ubuntu.com/ubuntu hardy-security main restricted universe multiverse
deb http://packages.medibuntu.org/ hardy free non-free
deb-src http://packages.medibuntu.org/ hardy free non-free

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu update-manager Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Martin Mai (mrkanister-deactivatedaccount-deactivatedaccount) said :
#1

Thank you for taking the time to report this issue and helping to make Ubuntu better. Examining the information you have given us, this does not appear to be a bug report so we are closing it and converting it to a question in the support tracker. We appreciate the difficulties you are facing, but it would make more sense to raise problems you are having in the support tracker at https://answers.launchpad.net/ubuntu if you are uncertain if they are bugs. For help on reporting bugs, see https://help.ubuntu.com/community/ReportingBugs.

Revision history for this message
Sam_ (and-sam) said :
#2

Hi,
I think it could be a missinterpretation. Could be btw. a task for translation.

Case: Install sec updates without confirmation ##but tell me about it first
What happens if you just click on the red arrow, will the update list appear or does it install right away if inserting your password.
The other case in which I want to receive a message only, I will first view the list, apply and insert password.

It seems installing without confirmation and telling about availability are two different things.
That's my thought at the moment.
https://help.ubuntu.com/community/SynapticHowto#How%20to%20keep%20your%20system%20up-to-date,%20including%20the%20Kernel

Revision history for this message
Nikolaus Rath (nikratio) said :
#3

I am not using a localized language so I don't think it's a translation issue.

"Installation" is, in my opinion, commonly established as the process of copying files and performing any required initializations. Are you saying that in the above context it is to be understood as "show an icon if something is ready to be installed"?

Revision history for this message
Sam_ (and-sam) said :
#4

Sorry, I've been thinking loud, btw. could_be a translation task, not suggesting that you run a localized version.
And yes the "icon" informs the user there're updates to install.
My idea would be:
Installation without confirmation:
No installation without password, hence, information about updates through this red arrow symbol (are security updates), installation right away after inserting password without showing a list of available updates.
With confirmation:
Click on red arrow symbol shows list of available updates first, e.g. apps could be unchecked, then apply=confirm, then password prompt, then installation.

Revision history for this message
Nikolaus Rath (nikratio) said :
#5

Your suggestion sounds good to me.

It also strengthens my belief that the current behaviour is a bug. "Automatically install updates" must not ask for a password and cannot just show an icon. It has to *install* the updates using dpkg, and it has to do so *automatically*, that is, without required user interaction.

Hence, I intent to reopen this as a bug unless someone objects in the next days.

Revision history for this message
Sam_ (and-sam) said :
#6

>"Automatically install updates" must not ask for a password

Nikolaus,
simple answer, since one has to be root to install via package and update manager (security and verification reasons) password is required.

Alternate answer:
https://help.ubuntu.com/community/AutomaticSecurityUpdates
https://help.ubuntu.com/community/Security

Revision history for this message
Nikolaus Rath (nikratio) said :
#7

The setting we are talking about can be found under Administration -> Software Sources, so I don't see any connection with update-manager. I would expect the dialog to set up a cron-job for apt-get (presumably the way it is described in the first link, I didn't read it completely).

Revision history for this message
Sam_ (and-sam) said :
#8

>I don't see any connection with update-manager

Nikolaus,
first:
quote of Synaptic link mentioned above:
Synaptic is a graphical front-end to apt, the package management system in Ubuntu. It combines the point-and-click simplicity of the graphical user interface with the power of the apt-get command line tool.
Synaptic works hand-in-hand with Update-Notifier and Update-Manager to inform you about updates to the software installed on your system.
Update-Notifier displays an icon in the notification area when updates are available. It will display a pop-up message and an icon in the notification area on your GNOME desktop.

second:
a cron-job weekly, daily or whatever is a script which includes commands that don't need interacting from user side when executed once.
Hence the front ends have to execute the scripts which underlay the process behind the GUI, in question is the unclear speech of GUI configuration and if it does execute commands as described.

>still wants me to install some security updates manually

From what I've read so far, this can be the case for certain packages.

So now, take your time and have a coffe, I've found some bugs and wishlists that might interest you:

https://bugs.launchpad.net/ubuntu/+source/apt/+bug/299360
quote: turned out, /etc/cron.daily/apt is not marked as executable on my system

https://bugs.launchpad.net/ubuntu/+source/software-properties/+bug/88278

https://bugs.launchpad.net/ubuntu/+source/update-notifier/+bug/253412

https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/185122

https://bugs.launchpad.net/ubuntu/+source/software-properties/+bug/184226/comments/5

https://bugs.launchpad.net/ubuntu/+source/synaptic/+bug/96705

http://packages.ubuntu.com/intrepid/cron-apt
quote: By default it just updates the package list and download new packages without installing

Revision history for this message
Nikolaus Rath (nikratio) said :
#9

Hi Sam,

I am sorry, but I do not understand what you are trying to tell me. I know how the Ubuntu package management works and what the different components do. I also fail to understand why you are throwing all these mostly unrelated bugs at me.

Could you try to explain your point again? What I am saying is that the option "Automatically install updates" should do what it says and automatically (without user interaction) install (invoke dpkg --install) all security updates?

Best,
Nikolaus

Revision history for this message
Sam_ (and-sam) said :
#10

Hi Nikolaus,
my point was to show the confusion of what it says and what it does.
Is /etc/cron.daily/apt executable?

>>still wants me to install some security updates manually

Does it install some security updates without intervention and some not?

Revision history for this message
Nikolaus Rath (nikratio) said :
#11

Yes, /etc/cron.daily/apt is executable.

I don't think that any updates are installed without intervention. But then, if some were, I wouldn't notice it, so how can I tell?

Revision history for this message
Sam_ (and-sam) said :
#12

I'd suggest to check in /var/log

Can you help with this problem?

Provide an answer of your own, or ask Nikolaus Rath for more information if necessary.

To post a message you must log in.