A security issue in Omarchy’s default Docker configuration meant that
essentially every program running in the user’s desktop session could escalate
to root without a password, sudo, or a privilege prompt.
If you use Omarchy, the most important takeaway is
simple: update to 4.0.1.
I reported this issue privately through the project’s responsible-disclosure
process. The underlying configuration has since been patched, so I’m publishing
the details now to explain what the issue is and let users know to update their
systems.
I explained myself badly and I think that comment reads as more argumentative than I intended.
I meant to say that the countercultural world of the early internet created a lot of the deeply problematic culture of the current moment as well as having a bunch of right-on goodness. The seeds of the bad shit were also there in amongst everything that was good.
Can’t argue with that