A security issue in Omarchy’s default Docker configuration meant that
essentially every program running in the user’s desktop session could escalate
to root without a password, sudo, or a privilege prompt.
If you use Omarchy, the most important takeaway is
simple: update to 4.0.1.
I reported this issue privately through the project’s responsible-disclosure
process. The underlying configuration has since been patched, so I’m publishing
the details now to explain what the issue is and let users know to update their
systems.
Ubuntu was my first Linux distro and I liked it back then. I would’ve recommended the old Ubuntu to non-tech-savvy people, or people who want a Linux that “just works” (although back then no Linux “just worked”, there was always at least a bit of debugging for me). However it’s enshittified a lot. A lot of basic software is only available as snaps. It generally feels quite corporate these days.