On Sun, Aug 30, 2015 at 10:30:54AM +0200, Michael Banck wrote: > But in general I think we want that our users get security updates ASAP,
I think this implementation doesn't fit that problem. All of this is IIUC: A user who depends on this only gets security updates when they reboot. As long as the machine is running, the security updates don't get installed, if the user hibernates the machine instead of rebooting then the security updates can be missing for a long time. Having a UI to prompt the user to take an action is still required, and it makes sense to me for that prompt to ask the user before downloading the packages. Steve