Software updater snuck in a package that is unwanted

[Oliver Grawert]

hi,
Am Dienstag, den 17.10.2017, 06:51 +0800 schrieb Bret Busby:
> 
> 
> So, how do I remove this trojan horse, without destroying the system?
> 

this is an extremely funny statement given this is the package that
exactly prevents you from getting any trojans viruses or other
malicious bits on your system.

by default this simply notifies you about available fixes for security
holes that could be used by either of the above harmful bits of
software ... 

the configuration options for its behaviour are (as others pointed out
already) integrated in the software panel of the system settings, there
is no need to enable automatic downloads or automatic installs in there
if you do not want them, but i would not un-install it since you will
miss the info that your system is exposing a security hole that any
kind of attacking software could use to infect your system.

if you want to remove it anyway, there is no harm in doing so but it
will remove the ubuntu-desktop and ubuntu-base meta-packages (which do
not contain anything but a list of dependencies) alongside... if you do
that, make sure to re-install these packages before doing a release to
release upgrade (i.e. upgrading from 16.04 to 18.04 or some such), this
is the only moment they are actually required ...

ciao
	oli
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20171017/0e988b71/attachment.sig>