RepoJournal
Linux Linux
112 wires and counting

$ follow Linux

Keep up with Linux in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-07
stories 43
RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Omarchy hardens lock and sleep hook installs, restrains Kitty remote control

By RepoJournal · Filed · About Linux

Ryan Hughes Linus Torvalds acrogenesis
3 people shipped this
Ryan Hughes @ryanrhughes 4 cited Linus Torvalds @torvalds 3 cited acrogenesis @acrogenesis 1 cited

Omarchy ships hardening for lock authentication and sleep-hook ownership, while Kitty's remote-control defaults move to the system config to close an untrusted-terminal attack channel.

Omarchy hardened two privilege boundaries. The lock authentication command lookup no longer trusts the environment it runs in [1], and installed sleep hooks (keyboard-backlight and hybrid-GPU, plus the supergfxd drop-in) are now published through hidden root-owned staging inodes with atomic replacement; unsafe existing copies are repaired without trusting current contents [2][3]. The related merge [3] carries the same ownership hardening for sleep hooks, and the "root-owned sleep hooks" description says the change applies "the same ownership boundary to the supergfxd service drop-in installed by the hybrid-GPU toggle" [2], so a complete install should close both paths.

Kitty's defaults now ship in `/etc/xdg/kitty/kitty.conf` with `allow_remote_control` set to `socket-only`, rejecting the remote-control channel from terminal output while keeping the local Unix socket used for active-tab directory lookup. The user config only contains the theme include and commented examples, so removing the include disconnects Kitty from Omarchy's theming system [4]. Separately, the locate configuration script `install/config/locate.sh` is gone: the two needed `updatedb` options (index Btrfs subvolume mounts, exclude `/.snapshots`) are fixed arguments in a package-owned drop-in for `plocate-updatedb.service`, passed identically in the installer and explicit AUR refresh, removing a privileged script and its migration [5].

On the kernel side, Linus pulled the tracing merge with a fix for tracefs files that did not take the `trace_array` reference, closing a lifetime gap around instances created and destroyed via the `instances` directory [6]. The locking merge fixes a softirq processing delay bug in `local_interrupt_disable()` that "should mostly only affect the Rust runtime", removes the now-unnecessary `hardirq_disable_count()`, invalidates stale lockdep `class_cache` entries, and fixes an `rt_mutex` issue [7]. The IRQ merge reverts an mbigen driver change that regressed two-port Hi1616 chips, fixes a too-long-preemption-off in the stm32mp-exti driver caused by a time unit ambiguity, and removes the unused `irq_domain_add_linear()` [8].

Action items

References

  1. [1] Merge pull request #10225 from mdisec/security/harden-quattro-fprintd-path ↗ basecamp/omarchy
  2. [2] Harden ownership of installed sleep hooks ↗ basecamp/omarchy
  3. [3] Merge pull request #10425 from acrogenesis/security/root-owned-sleep-hooks ↗ basecamp/omarchy
  4. [4] Move Kitty defaults to the system config and restrict remote control ↗ basecamp/omarchy
  5. [5] Replace locate configuration script with packaged service defaults ↗ basecamp/omarchy
  6. [6] Merge tag 'trace-v7.3-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace ↗ torvalds/linux
  7. [7] Merge tag 'locking-urgent-2026-09-06' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip ↗ torvalds/linux
  8. [8] Merge tag 'irq-urgent-2026-09-06' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip ↗ torvalds/linux

$ ls linux/reviews/ # the step-back reads

the week in review secretmem locked-page accounting fix lands the month in review Linux 7.2 closes and 7.3 opens amid kernel hardening and Omarchy's security push
Topics: Infrastructure Full archive →

Quick answers

What shipped in Linux on September 7, 2026?
Omarchy ships hardening for lock authentication and sleep-hook ownership, while Kitty's remote-control defaults move to the system config to close an untrusted-terminal attack channel. In total, 32 commits and 11 pull requests landed.
Who contributed to Linux on September 7, 2026?
3 developers shipped this update, including Linus Torvalds, Ryan Hughes, and acrogenesis.
What were the notable Linux updates?
Merge pull request #10225 from mdisec/security/harden-quattro-fprintd-path, Harden ownership of installed sleep hooks, and Merge pull request #10425 from acrogenesis/security/root-owned-sleep-hooks.
♥

$ log Linux --recent

Driver core, NVMe, LoongArch fixes land in 7.3-rc2; Omarchy gains OpenClaw app 26 shipped DRM fixes target Blackwell display, ceph nearfull_sync on remount 15 shipped secretmem locked-page accounting hole closed across Linux tree 15 shipped randstruct off with Rust, Hermes probe and keepLoaded fixes 6 shipped

$ log --all # elsewhere on the wire

Meta React Native adds Stable API guards to renderer attributed string FastAPI & Pydantic Pydantic fixes Mypy plugin crash, tightens datetime constraints

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.