Commit Graph

Select branches

Hide Pull Requests

quattro

sync/upstream-158e8cfb

sync/upstream-b686ed89

#1

#2

#3

#5

#6

#7

4.0.0.alpha-cn.1

4.0.0.alpha-cn.2

4.0.0.alpha-cn.3

4.0.0.alpha-cn.4

4.0.0.alpha-cn.5

4.0.0.alpha-cn.6

4.0.0.alpha-cn.7

4.0.0.alpha-cn.8

Mono Color

• b686ed892d Merge pull request #9267 from omacom/fix/close-password-only-sshd sync/upstream-b686ed89 Ryan HughesandGitHub 2026-08-30 18:46:35 -04:00
• 5c03dc8c09 Disable sshd entirely when no usable key is authorized Ryan HughesandClaude Fable 5 2026-08-30 18:45:05 -04:00
• 3c2a24b248 Merge pull request #9255 from omacom/security/migrate-existing-sshd-hardening-v4-0-2 Ryan HughesandGitHub 2026-08-30 18:38:00 -04:00
• 986962bb64 Keep the sshd hardening migration from locking users out Ryan HughesandClaude Fable 5 2026-08-30 18:28:43 -04:00
• a93ee6a433 Merge pull request #9263 from omacom/fix/shell-test-host-assumptions Ryan HughesandGitHub 2026-08-30 18:27:24 -04:00
• ca4f596a14 Harden existing key-based SSH setups acrogenesisandRyan Hughes 2026-08-30 15:17:33 -06:00
• 279f4d6b95 Give the sshd acceptance exercise a terminal for sudo Ryan Hughes 2026-08-30 18:06:33 -04:00
• 243fe1c9d9 Shadow the git URL checker instead of thinning PATH Ryan Hughes 2026-08-30 17:48:34 -04:00
• bae189861f Copy the Windows VM helper before the test hides /home Ryan Hughes 2026-08-30 17:48:34 -04:00
• 981274b20a Merge pull request #9249 from omacom/fix/acceptance-installed-tree-default Ryan HughesandGitHub 2026-08-30 16:58:09 -04:00
• fe1325202b Default the acceptance suite's OMARCHY_PATH to the installed tree alone Ryan Hughes 2026-08-30 16:58:04 -04:00
• 432b5e3e24 Merge pull request #9240 from omacom/fix/acceptance-security-coverage Ryan HughesandGitHub 2026-08-30 16:40:42 -04:00
• 99ec17acfa Cover the 4.0.2 security hardening in the acceptance suite Ryan Hughes 2026-08-30 16:08:12 -04:00
• 9ca8f90e91 Capture OCR screenshots at 2x scale Ryan Hughes 2026-08-30 16:07:16 -04:00
• d3a5e69162 Fail the package audit when the manifest is missing Ryan Hughes 2026-08-30 16:06:43 -04:00
• d6130394fa Default the suite's OMARCHY_PATH to the running session's tree Ryan Hughes 2026-08-30 16:06:29 -04:00
• 7aceb388e7 Merge pull request #9226 from omacom/security/add-security-policy Ryan HughesandGitHub 2026-08-30 16:15:41 -04:00
• e1fc502286 Nudge the bar over IPC when toggling visibility Ryan Hughes 2026-08-30 16:06:16 -04:00
• e68994680a Merge pull request #9232 from omacom/fix/menu-acceptance-style-navigation Ryan HughesandGitHub 2026-08-30 15:32:49 -04:00
• 55a3906f4c Step past the restored Unlock entry to reach Menu Bar in the menu test Ryan Hughes 2026-08-30 15:31:13 -04:00
• f8d7fae7a8 Match website security guidance acrogenesis 2026-08-30 13:26:18 -06:00
• 3def390764 Add security policy acrogenesis 2026-08-30 13:19:11 -06:00
• a24064c720 Merge pull request #9225 from omacom/fix/sshd-hardening-verification-case Ryan HughesandGitHub 2026-08-30 15:13:52 -04:00
• 71d7ac81ae Match sshd -T keywords case-insensitively when verifying hardening Ryan Hughes 2026-08-30 15:03:06 -04:00
• 4271b880c3 Merge pull request #9214 from omacom/rc-channel-pacman Ryan HughesandGitHub 2026-08-30 13:54:07 -04:00
• 884ca49340 Point the rc channel at the rc package repository Ryan Hughes 2026-08-30 13:52:06 -04:00
• 21b27c5aed Merge pull request #9200 from omacom/security/v4-0-2-input-asdcontrol-sshd Ryan HughesandGitHub 2026-08-30 13:03:09 -04:00
• df819a6f98 Close three paths from an unprivileged session to root Ryan HughesandDavid Heinemeier Hansson 2026-08-30 12:04:14 -04:00
• 943d2fcbe9 Merge pull request #9002 from acrogenesis/remove-legacy-installer-privileged-files Ryan HughesandGitHub 2026-08-30 12:07:18 -04:00
• 58c399de30 Revert "Drop unrelated privileged heredoc scanner" Ryan Hughes 2026-08-30 11:54:31 -04:00
• 15f26cbe1b Remove redundant migration command preflight Ryan Hughes 2026-08-30 11:49:54 -04:00
• 4c23077f80 Drop unrelated privileged heredoc scanner Ryan Hughes 2026-08-30 11:49:50 -04:00
• 40d0c9bbdf Require Quattro migrations to complete Ryan Hughes 2026-08-30 11:22:45 -04:00
• 8add7b49de Repair legacy XCompose and vulnerable power paths Ryan Hughes 2026-08-30 11:22:43 -04:00
• 625c4a1603 Quote install-app and install-font names like install-and-launch (#7843) 5 people 2026-08-30 15:22:58 +03:00
• e3b566bae8 Remove the last first-run sudoers grant the installer wrote 3 people 2026-08-30 09:06:22 +02:00
• 96404be37b Catch a privileged heredoc redirected with >| David Heinemeier HanssonandClaude Opus 5 2026-08-30 08:58:12 +02:00
• 844f320bbe Stop the legacy udev migration tripping the 4.0 upgrade guard David Heinemeier HanssonandClaude Opus 5 2026-08-30 08:58:07 +02:00
• 8e41961c7d Close privileged cleanup review gaps acrogenesis 2026-08-29 23:55:42 -06:00
• 002c70a544 Merge pull request #9090 from omacom/add-codeowners David Heinemeier HanssonandGitHub 2026-08-30 07:54:37 +02:00
• e711066522 Add CODEOWNERS requiring org owner review David Heinemeier Hansson 2026-08-30 07:46:48 +02:00
• f91d2e5453 Restore strict migration ordering acrogenesis 2026-08-29 22:42:33 -06:00
• 4d697a063c Harden privileged cleanup review fixes acrogenesis 2026-08-29 21:08:33 -06:00
• 4996941513 Address privileged cleanup review findings acrogenesis 2026-08-29 20:03:46 -06:00
• 7ed761fb31 Stop the heredoc check writing its own exemption acrogenesis 2026-08-29 16:08:41 -06:00
• 80e7c25b37 Fail the sudoers cleanup when it cannot elevate to look acrogenesis 2026-08-29 15:50:33 -06:00
• 394c1371c9 Model what each parser does with an empty and a dangling directive acrogenesis 2026-08-29 15:37:07 -06:00
• d593847728 Fail the suite on privileged writes through unquoted heredocs acrogenesis 2026-08-29 12:49:26 -06:00
• 96ed473ce1 Remove privileged files left behind by retired Omarchy installers acrogenesis 2026-08-29 12:02:07 -06:00
• cd519283fe Remove Omarchy 3 power udev rules that run a command out of a user home acrogenesis 2026-08-29 11:40:25 -06:00
• a75551de4e Allow a migration to clear a pre-4 layout that is a security defect acrogenesis 2026-08-29 11:40:17 -06:00
• 158e8cfb3a Merge pull request #8419 from AFOliveira/security/windows-vm-mount-boundary sync/upstream-158e8cfb Ryan HughesandGitHub 2026-08-29 19:31:39 -04:00
• e229927671 Merge pull request #8934 from ErikMelton/security/plymouth-publication-race Ryan HughesandGitHub 2026-08-29 18:45:37 -04:00
• 70e79c40ae Harden Plymouth and SDDM reset publication Ryan Hughes 2026-08-29 18:19:51 -04:00
• c720f0b981 Merge pull request #8951 from omacom/cups-browsed-temporarily-removed Ryan HughesandGitHub 2026-08-29 15:38:23 -04:00
• 5236f4426c Merge pull request #8203 from hjanuschka/fix-chromium-first-run-eula David Heinemeier HanssonandGitHub 2026-08-29 21:28:42 +02:00
• 2002fb35ed Test installed CUPS state directly Ryan Hughes 2026-08-29 15:27:16 -04:00
• e47784be11 Name the dev-link authorization when it is the thing that failed David Heinemeier HanssonandClaude Opus 5 2026-08-29 21:02:45 +02:00
• 96d5682460 Fix cups-browsed removal migration Ryan Hughes 2026-08-29 14:58:33 -04:00
• bf20c94ea0 Merge quattro into the Chromium first-run EULA branch David Heinemeier Hansson 2026-08-29 20:55:09 +02:00
• bb5b178e5f Remove unused cups-browsed install override Ryan Hughes 2026-08-29 14:24:05 -04:00
• 1b92b7f5be Correct the dev-link help now that Plymouth follows the link David Heinemeier HanssonandClaude Opus 5 2026-08-29 18:03:57 +02:00
• aac1b009e4 Cover non-regular Plymouth logo descriptors Erik Melton 2026-08-29 17:47:42 +02:00
• 1dbc7d5bce Close each discovered queue before inspecting or removing it David Heinemeier HanssonandCodex XHigh 2026-08-29 17:44:31 +02:00
• d67a7c00bc Cover the ownership and mode checks the publisher rests on David Heinemeier HanssonandClaude Opus 5 2026-08-29 17:39:33 +02:00
• 24c18df5b7 Temporarily remove automatic printer discovery David Heinemeier HanssonandCodex XHigh 2026-08-29 15:48:28 +02:00
• e9ba17e52e Keep the explanation for the Chromium color scheme defaults David Heinemeier HanssonandCodex XHigh 2026-08-29 17:13:06 +02:00
• eb76684c60 Retrofit the Chromium first-run EULA opt-out onto existing installs David Heinemeier HanssonandCodex XHigh 2026-08-29 17:13:06 +02:00
• 56fbaf4689 Merge pull request #8162 from jmwall/fix/windows-vm-opacity David Heinemeier HanssonandGitHub 2026-08-29 17:10:14 +02:00
• 363db1f569 Keep Plymouth publishing working in dev mode Erik Melton 2026-08-29 16:19:31 +02:00
• 11fa6b9809 Race Windows VM mount sources concurrently Erik MeltonandAfonso Oliveira 2026-08-29 16:02:38 +02:00
• bf10b75150 Protect the Windows VM web console Erik MeltonandAfonso Oliveira 2026-08-29 16:00:10 +02:00
• 079d116511 Cover the Plymouth parent-chain walk and guard its test harness 3 people 2026-08-29 16:01:01 +02:00
• d3b7810a76 Say why the privileged Plymouth transaction refused David Heinemeier HanssonandClaude Opus 5 2026-08-29 16:00:50 +02:00
• 05fb36d3cc Build Plymouth assets in a root-owned stage Erik Melton 2026-08-29 15:05:13 +02:00
• a465dfa681 Use the runtime path for Plymouth refresh Erik Melton 2026-08-29 14:42:47 +02:00
• 20a23b8c16 [Security] Complete Plymouth publication coverage 3 people 2026-08-28 19:37:04 +01:00
• 0f15e2330f [Security] Harden Plymouth asset publication Afonso OliveiraandErik Melton 2026-08-27 23:35:43 +01:00
• 2b91fdc0d3 [Security] Pin Plymouth asset reads before elevation Afonso OliveiraandErik Melton 2026-08-25 18:42:15 +01:00
• 0b3f1b7ead Merge pull request #8496 from Chessing234/security/webapp-http-only Ryan Hughes 2026-08-29 03:32:08 -04:00
• f20bf0a21b Merge pull request #8473 from bastidotnet/fix/webapp-desktop-value-escaping Ryan Hughes 2026-08-29 03:27:39 -04:00
• 9da8824098 Merge pull request #8416 from mdisec/theme-name-shell-syntax Ryan HughesandGitHub 2026-08-29 03:19:45 -04:00
• 169ad00a84 Merge pull request #8627 from mdisec/security/harden-cups-browsed Ryan HughesandGitHub 2026-08-29 02:19:53 -04:00
• 74997fd523 Ship CUPS authorization through settings package Ryan Hughes 2026-08-29 02:18:44 -04:00
• e51542d347 Point the site and README at the 4.0.0.alpha-cn.8 release quattro ZacharyZhang-NYandClaude Fable 5 2026-08-28 23:55:38 -04:00
• 640c0d4291 Begin the 4.0.0.alpha-cn.8 release: cn/release to 8 4.0.0.alpha-cn.8 ZacharyZhang-NYandClaude Fable 5 2026-08-28 23:37:31 -04:00
• ed9ef8bc04 Propagate key-trust failures and let doctor --fix heal a keyless mirror line ZacharyZhang-NYandClaude Fable 5 2026-08-28 23:35:24 -04:00
• 653656e439 Trust the registry key inside the mirror fix so Required never strands a client ZacharyZhang-NYandClaude Fable 5 2026-08-28 23:31:13 -04:00
• 8715c20af2 Merge remote-tracking branch 'origin/quattro' into quattro ZacharyZhang-NY 2026-08-28 23:18:35 -04:00
• f9c4085982 Make CJK lang rules survive 50-omarchy.conf's generic-family assign (fixes #4) ZacharyZhang-NYandClaude Fable 5 2026-08-28 23:12:03 -04:00
• 074247c79a Restore the app catalog verification date to its actual audit day ZacharyZhang-NYandClaude Fable 5 2026-08-28 23:09:26 -04:00
• dc0513a519 Remove WeCom from the China app catalog ZacharyZhang-NYandClaude Fable 5 2026-08-28 23:05:22 -04:00
• 495b24cedf Point the site and README at the 4.0.0.alpha-cn.7 release ZacharyZhang-NYandClaude Fable 5 2026-08-28 22:23:26 -04:00
• 9ce9979ce5 Begin the 4.0.0.alpha-cn.7 release: cn/release to 7 4.0.0.alpha-cn.7 ZacharyZhang-NYandClaude Fable 5 2026-08-28 22:14:10 -04:00
• f0672772d2 Merge pull request #8268 from Skeptomenos/fix/copy-url-python-shim-recursion Ryan HughesandGitHub 2026-08-28 21:54:19 -04:00
• 62eb5182d0 Merge pull request #8835 from basecamp/fix-browser-policy-exit-trap Ryan HughesandGitHub 2026-08-28 21:24:32 -04:00
• 06174bbd06 Distribute release ISOs through the dl.zacharyzhang.com R2 host ZacharyZhang-NYandClaude Fable 5 2026-08-28 21:14:10 -04:00
• 6b10dbf191 Harden Firefox policy dirs even when the theme refresh fails Ryan Hughes 2026-08-28 19:00:03 -04:00
• 5925929cb6 Stop the browser policy EXIT trap from reporting a clean run as failed Ryan Hughes 2026-08-28 19:00:03 -04:00
• 7d58bb9a62 Merge pull request #7972 from acrogenesis/harden-browser-policy-dirs Ryan HughesandGitHub 2026-08-28 18:00:20 -04:00