Close three paths from an unprivileged session to root

Apply the Omabot patch on Quattro, verify effective SSH hardening, prevent stored provisioning state from restoring the blanket input-group grant, and stop Omarchy from shipping asdcontrol authorization that belongs to the package.

Co-authored-by: David Heinemeier Hansson <david@hey.com>

This commit is contained in:

Ryan Hughes

2026-08-30 12:54:08 -04:00

co-authored by

David Heinemeier Hansson

parent 943d2fcbe9

commit df819a6f98

10 changed files with 274 additions and 70 deletions

etc/sudoers.d/omarchy-asdcontrol

-1

View File

				`@@ -1 +0,0 @@`
				`%wheel ALL=(ALL) NOPASSWD: /usr/bin/asdcontrol`