Live data from Hacker News

Omarchy: Any User Process Can Escalate to Root

0xcc.io

371–380 of 590 posts

Re: Omarchy: Any User Process Can Escalate to Root

#371
Omarchy has me questioning liking Rails because it just… straight up sucks?

It comes preloaded with friggen ZOOM. I don’t think Windows bloat is that bad.

If it makes people happy it makes people happy I guess. These guys trying it would be even more amazed at Fedora Workstation (“you can press windows and it shows all your open windows? That’s so much better”)

Re: Omarchy: Any User Process Can Escalate to Root

#372
post #18

I was expecting a more sophisticated attack and then I scrolled down… > Omarchy configured its default user as a member of the Linux docker group. What the fuck? Docker makes it VERY, VERY clear this is unsafe. Feel free to verify the documentation. https://docs.docker.com/engine/install/linux-postinstall/ Why would you want to make this the default for your users, without even telling them? Did someone configured hi…

> Did someone configured his own system to work this way and decided it is a good idea to ship it as a part of an "opinionated" distro??? Isn't that the entire selling point of Omarchy?

There is a major difference between uploading your dotfiles to github and shipping it as a mass-marketed distro.

At the very least they could have documented this sort of security trade-off if it actually is an intentional choice.

Re: Omarchy: Any User Process Can Escalate to Root

#373
post #338
post #329

Earlier quoted context omitted.

Github is awash with people's dotfiles including fully featured DEs built on top of things like Hyprland and Noctalia, and they don't require you to use a mess of a distro to use them.

100% this, either use a DE like GNOME or Cosmic if you can't be bothered, or spend a little time looking at someone's dotfiles. No need to use a whole distribution with 1000 other poor decisions made for you.

> No need to use a whole distribution with 1000 other poor decisions made for you.

I used Vim for a decade (and Linux for much of that time) and the constant tweaking and changing things drives you mad after a while. The more you invent it yourself the more it changes. This is why I prefer MacOS+VSCode these days, which comes with good defaults and simpler VIM-style bindings.

Omarchy sounds like those popular vim configs such as https://astronvim.com/, which I also tried using and also ended up heavily customizing myself. It provided some nice defaults as a baseline but was ultimately comes with too much hyper-customization (which has a lot to do with vim/neovim trying to act like other more modern editors).

Re: Omarchy: Any User Process Can Escalate to Root

#374

Earlier quoted context omitted.

Not a single mention of Pirate Software yet?

Am I missing something? What does pirating software has to do with that thread?

You are not missing anything for not knowing but Pirate Software in this context is another youtuber/influencer.

Re: Omarchy: Any User Process Can Escalate to Root

#375
post #79

Earlier quoted context omitted.

It's definitely not why *I* switched away from Windows

You didn't switch away from windows to get superior software? Also, the statement was valid because it will be true for most. It doesn't matter that you read it and it wasn't true for you, as long as it's true by the numbers, it's true, because it's one-to-many communication not one to one.

My reasons to switch to Linux from Windows were very little about "security" and plenty more about freedom. Sure, it was very nice avoiding running an antivirus, but that was just the cherry on top.

I wanted the freedom to change and "rice" my desktop however I wanted, and the Compiz cube looked awesome. I found Windows condescending and restricting in that regard. Yes, my first reason was the aesthetics, kick me out of the nerds club. (That was also the reason I switched to Mac for 10 years).

My second reason was that I suspected I could learn so much more about computers using Linux full time. And I did.

I was also younger and used to associate Windows with soul-sucking corporate jobs and Linux with new ideas and experimentation. It was us-vs-them. Open Source vs Micro$oft and all that vibe.

Re: Omarchy: Any User Process Can Escalate to Root

#376

Sad that people just complain about what DHH is doing and how he doesn't know anything. Nobody is forcing anybody to use Omarchy at all. Also $10 million was raised by him for it, did anybody else here raise that for a distro? I'm tired of the constant complaining and criticizing. Nobody said you have to use it.

The funding for this is to pay for a culture war, not a distro.

Re: Omarchy: Any User Process Can Escalate to Root

#378

Earlier quoted context omitted.

> What is different here? I don’t understand how this is a question. What’s different is that it comes configured this way out of the box, silently, without warning. It’s functionally equivalent to opting in to giving all user accounts root privileges, which is not what anyone expects the default configuration to be. You can choose to configure your installs this way if you choose to do so. It should not come this wa…

The whole point of Omarchy is for people who want to use Arch Linux but have it configured the way DHH does. So I think it's a little different. Anybody using an opinionated respin should understand what they're getting.

The Omarchy team admitted it was a mistake and corrected it quickly.

It’s strange that so many people are trying to call this security error intentional.

Re: Omarchy: Any User Process Can Escalate to Root

#379
docker access == root, as long as you can use volume mounts to arbitrarily mount anything else on the machine to a container. If the user is in the `docker` group, he's effectively root because he can patch around system files.

I once used this to recover lost sudoer access to a machine (have tested this now by editing my sudoer file with a comment):

~ docker run -it --rm -v /etc/sudoers:/etc/sudoers ubuntu bash

# apt update && apt install -y vim

# -- edit /etc/sudoers

# wq!

~ exit

~ sudo cat /etc/sudoers - works, comment is present

Re: Omarchy: Any User Process Can Escalate to Root

#380

Omarchy has me questioning liking Rails because it just… straight up sucks? It comes preloaded with friggen ZOOM. I don’t think Windows bloat is that bad. If it makes people happy it makes people happy I guess. These guys trying it would be even more amazed at Fedora Workstation (“you can press windows and it shows all your open windows? That’s so much better”)

i don't understand why DHH is shipping so much bloat in omarchy. The better solution would be to ask if user wants to install bloatware during installation.
Post reply on HN