Ubuntu shows updates / security updates on shell logins

[Seth Vidal]

On Wed, 4 Nov 2009, Kevin Kofler wrote:

> Richard June wrote:
>> It's a good idea for one off jobs where the primary user is also the
>> admin, but not so good for shared systems. Personally I think a better
>> plan would be to display that information *only* if the user is
>> flagged as an administrator, group root, wheel, etc.
>
> It's actually a security risk to display this to non-admin users. It's like
> putting a sticker on your door saying "This door is not locked because my
> keyhole is not working."
>

i don't think it is a security risk. Or rather - if it is then the rpmdb 
should not be readable by non-root users.

-sv