Commits

History for

Commits on Aug 30, 2026

Disable sshd entirely when no usable key is authorized

ryanrhughes
and
claude
committed
5c03dc8
Merge pull request #9255 from omacom/security/migrate-existing-sshd-hardening-v4-0-2
ryanrhughes
authored
3c2a24b
Keep the sshd hardening migration from locking users out

ryanrhughes
and
claude
committed
986962b
Harden existing key-based SSH setups

acrogenesis
authored and
ryanrhughes
committed
ca4f596
Give the sshd acceptance exercise a terminal for sudo
ryanrhughes
committed
279f4d6
Shadow the git URL checker instead of thinning PATH
ryanrhughes
committed
243fe1c
Copy the Windows VM helper before the test hides /home
ryanrhughes
committed
bae1898
Default the acceptance suite's OMARCHY_PATH to the installed tree alone
ryanrhughes
committed
fe13252
Cover the 4.0.2 security hardening in the acceptance suite
ryanrhughes
committed
99ec17a
Capture OCR screenshots at 2x scale
ryanrhughes
committed
9ca8f90
Fail the package audit when the manifest is missing
ryanrhughes
committed
d3a5e69
Default the suite's OMARCHY_PATH to the running session's tree
ryanrhughes
committed
d613039
Step past the restored Unlock entry to reach Menu Bar in the menu test
ryanrhughes
committed
55a3906
Match sshd -T keywords case-insensitively when verifying hardening
ryanrhughes
committed
71d7ac8
Close three paths from an unprivileged session to root

ryanrhughes
and
dhh
committed
df819a6
Merge pull request #9002 from acrogenesis/remove-legacy-installer-privileged-files
ryanrhughes
authored
943d2fc
Revert "Drop unrelated privileged heredoc scanner"
ryanrhughes
committed
58c399d
Remove redundant migration command preflight
ryanrhughes
committed
15f26cb
Drop unrelated privileged heredoc scanner
ryanrhughes
committed
4c23077
Require Quattro migrations to complete
ryanrhughes
committed
40d0c9b
Repair legacy XCompose and vulnerable power paths
ryanrhughes
committed
8add7b4
Quote install-app and install-font names like install-and-launch (#7843)

authored
625c4a1
Remove the last first-run sudoers grant the installer wrote

committed
e3b566b
Catch a privileged heredoc redirected with >|

dhh
and
claude
committed
96404be
Close privileged cleanup review gaps
acrogenesis
committed
8e41961
Restore strict migration ordering
acrogenesis
committed
f91d2e5
Harden privileged cleanup review fixes
acrogenesis
committed
4d697a0
Address privileged cleanup review findings
acrogenesis
committed
4996941
Stop the heredoc check writing its own exemption
acrogenesis
committed
7ed761f
Fail the sudoers cleanup when it cannot elevate to look
acrogenesis
committed
80e7c25
Model what each parser does with an empty and a dangling directive
acrogenesis
committed
394c137
Fail the suite on privileged writes through unquoted heredocs
acrogenesis
committed
d593847
Remove privileged files left behind by retired Omarchy installers
acrogenesis
committed
96ed473
Remove Omarchy 3 power udev rules that run a command out of a user home
acrogenesis
committed
cd51928

Commits on Aug 29, 2026

Merge pull request #8419 from AFOliveira/security/windows-vm-mount-boundary
ryanrhughes
authored
158e8cf