Remove the sudo lockout reset command (#8046)

Nothing in the repository called omarchy-sudo-reset, and its one line interpolated an environment-supplied $USER into a string handed to a root shell: `su -c "faillock --reset --user $USER"`. $USER is an environment variable rather than a kernel-supplied identity, so whatever set it before the command ran chose the rest of what root's shell executed. That is not a way past PAM on its own — su still has to authenticate — but the installer sets root's password to the user's own, so the prompt this raises is one the user answers by habit.

It bought little for that. Omarchy sets `deny=10 unlock_time=120` in /etc/pam.d/system-auth and in the lock screen's PAM stack, so a lockout takes ten wrong passwords to reach and clears itself two minutes later, and the manual documents the root-TTY reset for anyone who would rather not wait.

Co-authored-by: David Heinemeier Hansson <david@hey.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: Codex XHigh <noreply@openai.com>

This commit is contained in:

Omarchybot

2026-08-24 15:49:17 +02:00

committed by

GitHub

co-authored by

David Heinemeier Hansson

Claude Opus 5

Codex XHigh

parent 20400badda

commit d99d4fc6de

1 changed files with 0 additions and 5 deletions

bin/omarchy-sudo-reset

-5

View File

@@ -1,5 +0,0 @@
 #!/bin/bash
 # omarchy:summary=Reset the sudo lockout/faillock for the current user.
 su -c "faillock --reset --user $USER"