I don't think this is the same thing. Doesn't "Always show security updates" just mean all packages that fix a security-related problem show up in the list of possible updates? If so, this has nothing to do with defining the criteria under which Update Manager's icon shows up in the Notification Area.Pjotr wrote:But such an option does exist already:somelurker wrote: Right now, there is no option to disable the icon from showing at all once all desired updates are applied. In general, I think users need to be able to set the behavior of Update Manager to best suit their needs, and right now a single behavior is forcefully imposed on them.
In the Preferences of Update Manager, click the Options button and remove the tick for: "Always show security updates" (which is, if I understand correctly, your main gripe). You might also want to remove the tick for "Always show kernel updates".
Are you suggesting kernel versions are recommended a different way in 18.3's version of Update Manager? Because unless they are, and unless Update Manager hides its icon when irrelevant kernel versions are recommended, I think I made a fair point. The user can install a completely different series of kernel versions and be just as secure without being nagged by Update Manager.Cosmo wrote: This thread is expressively about the latest version of Update Manager (UM) in Mint 18.3 and the change, as introduced with it, as expressively said in the starting post.
Are you saying that security should be the factor users consider paramount, or that in deciding how Update Manager behaves, Mint's developers should consider security paramount? If the former, see my point about the various uses to which a computer can be put. A Netflix-only machine does not need to be updated every 2 hours. If the latter, just look at the 3 choices presented to the user that I've already mentioned: "Don't break my computer!", "Optimize stability and security", and "Always update everything.". If it had been the developer's intent to consider only security at the exclusion of all other values, such choices would not have a purpose.Cosmo wrote: For the average user this is the paramount consideration. And they are most likely about 90 % of all users. Following that I strongly disagree.
The situation is much simpler than you are implying. Just allow users to choose what level of security update to select by default. This is a feature Update Manager already has. It was the way UM used to behave, and the default behavior doesn't revert back to that, the user should at least be allowed to configure a setting to revert back to the previous behavior.Cosmo wrote: How exactly? I miss any practical suggestion. Shall a user have to walk through all of the thousands of installed packages and judge them? I do not claim to know all of them and I cannot imagine, that only one person knows all of them.
The administrator may still want to update occasionally. Deactivating UM completely would be a waste of time because it would have to be reactivated again each time updates are desired. Also, I never argued against having the option of displaying updates for any user. I simply argued for giving them a choice. In particular, if a user chooses to only show updates of a particular level, that choice should be respected by the UM notification icon.Cosmo wrote: What hinders you to deactivate UM autostart in this case completely? I agree, that it makes no sense to update a VM, which gets reset to the snapshot after usage. But this is no argument against for displaying th updates for average users.
That's not my point. The problem isn't whether the user wants to use the preferences. My point is that preferences do not exist that allow users to choose when the Update Manager go away, except to disable it completely. There are moderate choices between the current extreme of showing the icon when even a single, potentially system-breaking update is not installed and the other extreme of turning off Update Manager completely. Let the user choose when to show it. I've already mentioned the most obvious example example: Showing the icon when levels of updates selected by default are installed.Cosmo. wrote:You have the decision. If you do not use the preferences, than this is also your decision - and you have to "accept the consequences". Quite easy.somelurker wrote: Ultimately, I am the user of my system, and I should get to decide how much importance to place on security. Nobody tells me how many locks I need to put on my door. I make that decision and if a burglar breaks in, I accept all the consequences of my decision. But it should be my decision nonetheless.
My larger point still stands. Even if a package that's not installed would fix a vulnerability in software, that vulnerability may be irrelevant to a particular use case. The uninstalled package is only an advantage in terms of security, and only in certain contexts. Why should I need to install a LibreOffice update if I never use LibreOffice, even if it's a critical vulnerability? It would just be a waste of disk space. Taking up disk space for no good reason is a disadvantage in the area of usability.Cosmo. wrote:You are right in so far, that the real world is not only black and white. And of course you are right, that a fully updated system does not mean, that there are no security holes, e. g. because there is for a given leak no fix available. This is bad reality. But it does not change, that a not applied security fix is nothing else than a security hole. An open hole is never an advantage regarding security, but always a leak. Nothing can change that.somelurker wrote: Third, the view that all updates must be applied is neither a necessary nor a sufficient condition for ensuring security in all contexts. To equate applying all updates with total security is an oversimplification.
You are assuming that the user wants the quickest possible solution. Speed is not necessarily your ally when you're trying to install updates without breaking your system. When someone is on a busy schedule, they may only be able to install updates one by one. The user may want to install the updates slowly, perhaps one day at a time, or at whatever pace their schedule allows. Such users don't want to disable all security and kernel updates from displaying. They want to still be able to see the updates. They just don't want the icon popping up.Cosmo. wrote: Again I miss any practical suggestion. Besides that: You can disable all level and security and kernel updates from displaying and you have, what you want. But also again: Simply deactivating UM is the quicker method.
I should also point out that you may want to skip a particular package temporarily without permanently disabling it. If I want to skip a particular version because the newest version is buggy, I'll have to remember to unhide that package later on, or I will miss the version after the buggy version. In this case, it would be better to leave the update displayed but let the user stop showing the Update Manager icon just because that update hasn't been installed. The icon is just a piece of code. It can't possibly know why the user would want to skip the update temporarily, so it should defer to user choice.
How exactly is the icon lying? When the UM icon pops up, is there some kind of objective and universal meaning that it must have? Clearly, there is no such meaning. The appearance of the icon isn't the solution to a mathematical equation or the expression of a principle of physics. It would be more accurate to classify it under semiotics. A certain hand gesture may be a sign of respect in one culture, but extremely offensive in another. If a user wants to use the icon to alert him when new updates he has never seen before are available, how is that choice any less valid than the default behavior right now (the user must install all updates or the icon will not disappear)? Right now, there is no setting in Mint 18.3's Update Manager that allows the first choice rather than the second, and that's a problem when the default behavior of Update Manager changes as it did post-18.3.Cosmo. wrote: Very correct. But than don't let it display. I do not understand, why somebody wants the icon to get displayed but decides, to not apply the updates. Even less I understand, why somebody does want UM to lie. A lie is a lie, how ever you describe the circumstances. If a user has a very spacial usage, than he can accommodate UM to his very special need. But Mint is made with the average user in mind, and that are about 90 %.
Regarding the 3 policies: I had written already 1 year ago, that those policies are a mistake in itself and I have linked in one of my posts in this thread to this post.
Again, there is no necessary connection between the icon and any particular truth. The icon doesn't represent a particular piece of information. It's not a question of whether or not I like the information, but what information I want the icon to convey to me. I want the icon to tell me when new updates I have never seen before are now available, not to remind me to install every update, including system-breaking packages or packages for which I've chosen to skip a version, but not block completely. That way, the icon serves a more useful purpose for me.Cosmo. wrote: Which nagging? UM shows an icon. Point. No popup or anything else, nothing. This icon represents an information. Maybe you don't like the information, but this does not change the least about the state of the system. You can ignore it, you can dismiss UM, but this does not change anything about the current state.
Am I telling you that the behavior you desire of always showing the icon when any package you haven't yet installed for any reason is inferior? No, but it is just one choice among many. Imho, it shouldn't be the default behavior, but even if it is, the user should be allowed to opt out of it without completely killing Update Manager or blocking packages.