Engage. Your Community

Gnome Package Updater Concern

I've noticed that when I use the Package Updater application I can install updates without having to authenticate with the admin password. Typically, when I use DNF or the Software application to update, it requires I authenticate before proceeding. Is this a security concern? Thanks for your help!

The Gnome and KDE updaters will proceed without authentication while all other methods require it. There was some discussion when Fedora introduced the change a few versions ago. As only applying updates is allowed, it isn't possible to add or remove packages, it isn't seen as a security issue.

It could be argued that it is a security plus rather than an issue as some updates fix known security issues. So it is important that they are installed as soon as possible. If this can be done without needing to wait for someone with admin access then that is good.

Please Log In to participate with the community.