Deploying Linux Desktops in a Business (was Re: Antivirus for Ubuntu)

[Mario Vukelic]

On Fri, 2007-05-25 at 08:10 +0100, Ben Edwards wrote:
> Is it possible to give non sudo access to the box but allow
> them to install security updates. 

IMHO in a business setting you will always want to test any package
update on a spare machine before deploying it. Thus I would not give
users this option. If there are just a few machines it should be trivial
to have the admin do it via ssh, and if there are many machines you will
want to invest the time and do some scripting to be able to upgrade all
machines with one command (after testing the update).

If you want to install updates without testing anyway, you do not need
to give the users sudo access. Simply go to menu System|Administration
and start Software Sources. On the Updates tab, check "Install security
updates without confirmation". It will then work automatically.