Your solution is better, Matt. Long commands connected through pipes look rather intimidating to new users, and we are in the Absolute Beginners Section. But I've got a question, too. Locking linux-image at the current version would undoubtedly work in precise as this package has versioned dependencies there. The OP however is using quantal, and from what i see here, it seems that locking linux-image won't prevent newer versions of linux-image-generic from being installed. Perhaps linux-image-generic should be locked instead?