[Bug 982032] Re: package-data-downloader user.d hook relies on gksudo, not present on Kubuntu

[Robert Simmons]

I am still affected by this bug, but I don't even have update-notifier
installed at all:

update-notifier:
  Installed: (none)
  Candidate: 0.119ubuntu8.4

I would rather not install this simply to get rid of this annoying popup since it wants to install all of the following packages as well:
The following NEW packages will be installed:
  apport-gtk aptdaemon-data gir1.2-dbusmenu-glib-0.4 gir1.2-dbusmenu-gtk-0.4 gir1.2-dee-1.0
  gir1.2-gtk-3.0 gir1.2-javascriptcoregtk-3.0 gir1.2-soup-2.4 gir1.2-unity-5.0 gir1.2-vte-2.90
  gir1.2-webkit-3.0 indicator-application libappindicator3-1 libdee-1.0-4 libgail-3-0 libgee2
  libindicator3-7 libjavascriptcoregtk-3.0-0 libnotify4 libunity9 libvte-2.90-9 libvte-2.90-common
  libwebkitgtk-3.0-0 libwebkitgtk-3.0-common python-aptdaemon.gtk3widgets
  software-properties-common software-properties-gtk update-manager update-notifier

Is there some other option?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-notifier in Ubuntu.
https://bugs.launchpad.net/bugs/982032

Title:
  package-data-downloader user.d hook relies on gksudo, not present on
  Kubuntu

Status in “update-notifier” package in Ubuntu:
  Fix Released
Status in “update-notifier” source package in Precise:
  Fix Released
Status in “update-notifier” source package in Quantal:
  Fix Released

Bug description:
  [Impact]
  Use of gksudo in the update-notifier hook means that the "Run this action" command fails on a Kubuntu system; so any time a data download fails, Kubuntu users are presented with a message about it but given nothing that helps them fix the problem.

  [Test Case]
  1. On Kubuntu, run sudo cp /usr/share/update-notifier/package-data-downloads-failed /var/lib/update-notifier/user.d/
  2. On the resulting dialog, click on 'Run this action'
  3. Verify that the action gives an error about gksudo
  4. Upgrade to the update-notifier-common package in precise-proposed
  5. Repeat steps 1 and 2
  6. Confirm that you are prompted for a password and that the command runs without error.
  7. On a separate Ubuntu install, install the update-notifier-common package from precise-proposed
  8. Repeat steps 5 and 6

  [Regression potential]
  The package uploaded to precise-proposed does not add a dependency on policykit-1 (since it did not have one on gksudo).  So if gksudo was installed on the user's system, but policykit-1 is not, this will cause the command to fail where before it succeeded.  It's possible this should be addressed by adding a dependency.
  The pkexec command could also fail where gksudo did not.  I can't think of any reason why this would be.

  The package-data-downloader update-notifier hook has an action that
  requires root privileges.  In the interest in expedience, this button
  uses gksudo in precise; but gksudo is not included in Kubuntu.

  This needs to be fixed to either use policykit + a dbus service (which
  may be too heavyweight for this despite being the preferred security
  model?), or to use use something like ubiquity's "get root any way I
  can" wrapper.

  Neither of these fixes is going to make it for precise .0, however.
  This is inconvenient, but the dialog is only presented in case of a
  download failure anyway.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-notifier/+bug/982032/+subscriptions