$ the-wire · showcase
LSM gets namespace hooks, AES moves into lib/crypto
By RepoJournal · Filed · About Linux · Composed from the cited sources · methodology
The 7.4 merge window opened with security and crypto plumbing: LSM hooks for namespace management with no in-tree users yet, and x86/riscv AES accelerated from the library layer rather than the skcipher API.
Merge tag 'lsm-pr-20261016' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/lsm torvalds/linux
Paul Moore's pull adds LSM hooks, object blobs, and audit records for namespace management. No in-tree users consume them yet; Landlock support is queued for v7.4, so nothing changes for existing policy until then.
Merge tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux torvalds/linux
Eric Biggers moved the x86 and riscv optimized AES implementations (ECB, CBC, CBC-CTS, CTR, XCTR, XTS) into lib/crypto, so the library APIs are accelerated directly while crypto_skcipher keeps its speed. It also removes a lot of the crypto API glue boilerplate.
Keep a switch to stable or rc from stranding edge on an old omarchy-dev basecamp/omarchy
On edge, `omarchy channel set stable` (and `rc`) ran `omarchy-refresh-pacman <channel>` first, and its `-Syyuu` downgraded machines to whatever the destination repos listed. Until 2026-10-18 23:06 UTC stable still carried `omarchy-dev` 4.0.0.r1832, so `-uu` pulled an edge box back from r7052 to r1832, a build that predates command-scoped sudo and fails the wrapper check.
Offer stable and rc on aarch64 basecamp/omarchy
Every aarch64 install landed on edge regardless of ISO: `default/pacman/aarch64/` held only edge templates and `omarchy_pacman_default_channel` returned edge on all ARM platforms. A 4.5.0rc1 aarch64 install switched to edge on its first update, and 4.5 is the first release whose `omarchy` and `omarchy-settings` run on aarch64.
Guide fingerprint enrollment step by step basecamp/omarchy
Fingerprint setup printed fprintd's raw `Enroll result: enroll-stage-passed` lines, which read as "one touch and wait" on a press sensor like a Mac's Touch ID, and enrollment timed out a minute later. It now queries the reader's scan type and prints a numbered step, a retry, or a stop reason per result. The rest of the day was low-impact: docs gained an AGENTS.md symlink, a `testdocs` make targ...
Action items
- → Re-run `omarchy channel set stable` (or `rc`) on any edge machine you switched after 2026-10-18 23:06 UTC and reinsta... basecamp/omarchy [immediate]
