A security issue in Omarchy’s default Docker configuration meant that
essentially every program running in the user’s desktop session could escalate
to root without a password, sudo, or a privilege prompt.
If you use Omarchy, the most important takeaway is
simple: update to 4.0.1.
I reported this issue privately through the project’s responsible-disclosure
process. The underlying configuration has since been patched, so I’m publishing
the details now to explain what the issue is and let users know to update their
systems.
I wouldn’t take that statement too seriously, some people really like to gatekeep. The simple fact is that Ubuntu has done a lot to make Linux more accessible to a lot of people who otherwise would still be using another OS. That also makes it an easy target for ridicule.
Having said that, they also made a lot of unpopular decisions, especially amongst Linux purists.