<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title><![CDATA[Restrict uninstall of last kernel image]]></title>
    <link>http://brainstorm.ubuntu.com/item/22408/</link>
    <description><![CDATA[I recently helped another user through the process of repairing a very broken system. In attempting to free up some space on /boot, he accidentally removed the packages for *all* of his kernel images. He intended to remove all but the most recent, I assume. (reference: http://ubuntuforums.org/showthread.php?t=1313854)<br /><br />I'm proposing this idea because it's incredibly easy to accidentally render a system unbootable, and it's disproportionately difficult to fix it once it's in that state. I don't really think this is a *bug* per se, since the package manager was obeying the user input.<br />
<br />


<b>[34 votes] Solution #1: Restrict uninstall of last kernel image</b>
<br />

<br />
<br />



<b>[9 votes] Solution #2: Remove old kernel image once the new one is verified</b>
<br />

<br />
<br />



]]></description>

    <language>en-us</language>
    <pubDate>Thu, 12 Nov 2009 00:50:59 +0000</pubDate>
    <lastBuildDate>Thu, 19 Nov 2009 14:51:21 +0000</lastBuildDate>
    <generator>QAPoll module</generator>
    <guid isPermaLink="true">http://brainstorm.ubuntu.com/idea/22408/</guid>
        <item>
  <title>Comment from andruk</title>
  <description><![CDATA[Yeah, allowing the user to *inadvertently* render their system unbootable is not a good thing.]]></description>
  <pubDate>Thu, 12 Nov 2009 05:59:21 +0000</pubDate>
</item>
        <item>
  <title>Comment from Darwin Survivor</title>
  <description><![CDATA[Last I checked, you needed to be root (or use sudo) to do that.<br /><br />If we are going to restrict this, we may as well restrict users from manually running "sudo rm -rf /boot/*" which I find to be a bad solution.<br /><br />Instead we should be INFORMING users that certain actions are not safe to run. For packages that need to be there (kernel, etc), as note or warning next to the package such as "warning, this package is required for the proper running of your computer" should be enough. If users are going to read that, then there's not much else you can do.]]></description>
  <pubDate>Thu, 12 Nov 2009 06:33:15 +0000</pubDate>
</item>
        <item>
  <title>Comment from Ssdg</title>
  <description><![CDATA[To me it's already done. just change your password to "I want my computer to break" and it's done.<br /><br />"sudo" powers require great responsibility. And typing the password should be enough a warning.]]></description>
  <pubDate>Thu, 12 Nov 2009 08:44:34 +0000</pubDate>
</item>
        <item>
  <title>Comment from fizyk</title>
  <description><![CDATA[To avoid such problems, ubuntu should automatically clear old kernels, and leave only one or two recent kernels.<br />If kernels won't be taking space on root partition, then users wouldn't try to do it manually with sometimes bad outcome.]]></description>
  <pubDate>Thu, 12 Nov 2009 13:08:07 +0000</pubDate>
</item>
        <item>
  <title>Comment from fizyk</title>
  <description><![CDATA[usually, we know if kernel fails right after reboot, after updating it.]]></description>
  <pubDate>Thu, 12 Nov 2009 22:46:00 +0000</pubDate>
</item>
        <item>
  <title>Comment from Jon Monreal</title>
  <description><![CDATA[@Ssdg: ""sudo" powers require great responsibility. And typing the password should be enough a warning."<br /><br />That could be a problem, considering how often sudo is required to do tasks. Ubuntu users get as used to sudo and giving permissions as users of newer Microsoft operating systems have gotten used to clicking through UAC boxes.<br /><br />There is a good point here in having a "second layer" that is more serious than the first.]]></description>
  <pubDate>Sat, 14 Nov 2009 15:17:13 +0000</pubDate>
</item>
        <item>
  <title>Comment from jploz</title>
  <description><![CDATA[I disagree. Additional warnings and popups do not improve security in my opinion. Example: all of the unexperienced users i know (including my girl friend) do not read warning messages/error messages etc. They just click it away and then ask: why doesn't it work? And thats the way most of end users work.<br /><br />Common (daily) work should be possible without any root permissions and the term of 'administrating' a computer by typing the 'administrator password' needs to be emphasized in turn.]]></description>
  <pubDate>Thu, 19 Nov 2009 14:51:20 +0000</pubDate>
</item>
      </channel>
</rss>

