Who contributed to Linux on August 25, 2026?

3 developers shipped this update, including Linus Torvalds, Omarchybot, and codefiles.

What were the notable Linux updates?

Don't put the user in the docker group; make it opt-in (#8056), Flag a reboot when the docker group changes (#8080), and Offer to reboot when toggling sudoless Docker; show only the relevant menu entry (#8098).

Linux

The kernel, distros, and the rigs of the moment

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

OMARCHY KILLS THE ROOT EQUIVALENT DOCKER GROUP

By RepoJournal · Filed 06:57 UTC on August 25, 2026 · About Linux

3 people shipped this

Linus Torvalds @torvalds 5 cited

Omarchybot @omarchybot 4 cited

codefiles @codefiles 1 cited

Omarchy closes a passwordless path to root and cleans up a root-shell string injection, while the kernel lands new DMA, slab, and PHY support.

Omarchy's Docker group is no longer a silent highway to root: the default no longer puts the user in the group, and it's now opt-in [1]. The reasoning is blunt, "anything in it can `docker run -v /:/host` and rewrite the host as root with no password" [1], so a rogue plugin or poisoned dependency loses its headless root access. Removing the group triggers a reboot flag and the toggles now offer to reboot, because group membership only takes effect on a fresh session [2][3]. Omarchy also yanked a sudo lockout reset command that interpolated the environment-supplied $USER into a root shell, a string injection risk [4]. Meanwhile, the kernel pulls in a refactored x86 platform driver tree with major cleanup and the new Halo RGB LED driver [5], plus dmaengine gains a combined config-and-prepare API and MediaTek MT8189 UART DMA support [6]. The new kfree_rcu_nolock() lets you defer freeing from NMI or BPF contexts without spinning on a lock [7], and dma-mapping adds a config option for the swiotlb default pool size [8]. PHY updates add a pile of new support, including Qualcomm QMP for SM8475 and Renesas RZ/G3L USB2 [9]. Quiet on the archinstall front: just Ruff lint cleanup [10].

Action items

→ Upgrade or reconfigure Omarchy to remove users from the docker group and opt in explicitly if needed basecamp/omarchy [immediate]
→ Apply the Omarchy updates that flag a reboot when the docker group changes, and reboot to enforce it basecamp/omarchy [immediate]
→ Review your local fork for any use of omarchy-sudo-reset and remove it basecamp/omarchy [immediate]
→ Monitor the new kfree_rcu_nolock() and swiotlb pool config if you run BPF or constrained memory systems torvalds/linux [plan]

References

[1] Don't put the user in the docker group; make it opt-in (#8056) basecamp/omarchy
[2] Flag a reboot when the docker group changes (#8080) basecamp/omarchy
[3] Offer to reboot when toggling sudoless Docker; show only the relevant menu entry (#8098) basecamp/omarchy
[4] Remove the sudo lockout reset command (#8046) basecamp/omarchy
[5] Merge tag 'platform-drivers-x86-v7.3-1' of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86 torvalds/linux
[6] Merge tag 'dmaengine-7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/dmaengine torvalds/linux
[7] Merge tag 'slab-for-7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/vbabka/slab torvalds/linux
[8] Merge tags 'dma-mapping-7.3-2026-08-24' and 'dma-mapping-7.3-2026-08-24-2' of git://git.kernel.org/pub/scm/linux/kernel/git/mszyprowski/linux torvalds/linux
[9] Merge tag 'phy-for-7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/phy/linux-phy torvalds/linux
[10] Enable Ruff flake8-comprehensions (#4728) archlinux/archinstall

Quick answers

What shipped in Linux on August 25, 2026?: Omarchy closes a passwordless path to root and cleans up a root-shell string injection, while the kernel lands new DMA, slab, and PHY support. In total, 27 commits and 11 pull requests landed.
Who contributed to Linux on August 25, 2026?: 3 developers shipped this update, including Linus Torvalds, Omarchybot, and codefiles.
What were the notable Linux updates?: Don't put the user in the docker group; make it opt-in (#8056), Flag a reboot when the docker group changes (#8080), and Offer to reboot when toggling sudoless Docker; show only the relevant menu entry (#8098).

OMARCHY CLOSES THE RCE DOOR

A hard-won hardening sweep in omarchy kills the last free-form shell execution paths, and the kernel's merge storm delivers PCI, RCU, and SMB2 upgrades.