> Actually the default policy allows every user who sits in front of the > computer to > update the package cache. Do you run from a VNC/remote session?
Nope. The relevant bit of /usr/share/polkit-1/actions/org.debian.apt.policy, as installed by aptdaemon, is: <action id="org.debian.apt.update-cache"> <description>Update package information</description> <message>Authentication is required to query the software repositories for installable packages</message> <defaults> <allow_any>auth_admin</allow_any> <allow_inactive>auth_admin</allow_inactive> <allow_active>auth_admin_keep</allow_active> </defaults> </action> The above matches the behaviour we have been seeing. Changing "auth_admin" and "auth_admin_keep" to "yes" works as expected, removing the need to authenticate. -- Update manager now requires two authentications https://bugs.launchpad.net/bugs/448810 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs