Proof Portal
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
Fingerprint reader not detected: Minisforum AI X1 Pro (Realtek 2541:fa03)
Reported by Zyliax · filed Aug 19, 2026 · open at source
At a glance
- 1 · What is claimed?
- Only the report text below — no validator has restated it as checkable claims yet.
- 2 · What does it affect?
- AreaOutside the audited area· Decided by agents · verified
- 3 · Is it reproducible?
- No validation has been run yet.
- 4 · What remains unclear?
- Not validated yet: no claims, no reproducer.
- 5 · What happens next?
- Decided by agents and verified by a second, independent agent — see the decision.
Original report
Environment
- Omarchy version: 4.0.0-1
- Hardware: Minisforum AI X1 Pro (AMD Ryzen AI 9 HX 470)
- Fingerprint reader: USB
2541:fa03— "Realtek USB2.0 Finger Print Bridge"
Symptom
omarchy setup security fingerprint aborts immediately:
Setting up fingerprint scanner for authentication.
No fingerprint sensor detected.Root cause
The detection script /usr/share/omarchy/bin/omarchy-hw-fingerprint misses this reader for two reasons:
- Vendor
2541is not infingerprint_vendors(27c6 138a 06cb 08ff 1c7a 147e). - The reader's product string is "Finger Print" (two words), but the product match only catches the single word
*fingerprint*:
[[ $product == *fingerprint* || $product == *biometric* || ... ]] && exit 0Note: 2541:fa03 is a supported device in libfprint (listed as "Realtek MOC Fingerprint Sensor" on https://fprint.freedesktop.org/supported-devices.html), and the device's USB interface has no kernel driver bound, so libfprint/fprintd can claim it directly. The only blocker is Omarchy's detection gate.
Fix (verified working)
Add 2541 (and 3274, the other Realtek MOC ID) to the vendor list, and broaden the product match to also catch "Finger Print":
- fingerprint_vendors=" 27c6 138a 06cb 08ff 1c7a 147e "
+ fingerprint_vendors=" 27c6 138a 06cb 08ff 27c6 08ff 1c7a 147e 2541 3274 "(actual corrected line)
- fingerprint_vendors=" 27c6 138a 06cb 08ff 1c7a 147e "
+ fingerprint_vendors=" 27c6 138a 06cb 08ff 1c7a 147e 2541 3274 "- [[ $product == *fingerprint* || $product == *biometric* || $product == *elan:arm-m4* || $product == "fpc "* ]] && exit 0
+ [[ $product == *fingerprint* || $product == *finger*print* || $product == *biometric* || $product == *elan:arm-m4* || $product == "fpc "* ]] && exit 0After this change, omarchy setup security fingerprint detects the reader, fprintd-enroll + fprintd-verify succeed, and sudo/polkit/lock-screen PAM are configured correctly.
Note
The patched file lives in the package-managed /usr/share/omarchy/ and is reverted on the next omarchy update, so a permanent fix in the package is needed.
View raw text
## Environment - Omarchy version: 4.0.0-1 - Hardware: Minisforum AI X1 Pro (AMD Ryzen AI 9 HX 470) - Fingerprint reader: USB `2541:fa03` — "Realtek USB2.0 Finger Print Bridge" ## Symptom `omarchy setup security fingerprint` aborts immediately: ``` Setting up fingerprint scanner for authentication. No fingerprint sensor detected. ``` ## Root cause The detection script `/usr/share/omarchy/bin/omarchy-hw-fingerprint` misses this reader for two reasons: 1. Vendor `2541` is not in `fingerprint_vendors` (`27c6 138a 06cb 08ff 1c7a 147e`). 2. The reader's product string is **"Finger Print"** (two words), but the product match only catches the single word `*fingerprint*`: ```bash [[ $product == *fingerprint* || $product == *biometric* || ... ]] && exit 0 ``` Note: `2541:fa03` is a **supported device** in libfprint (listed as "Realtek MOC Fingerprint Sensor" on https://fprint.freedesktop.org/supported-devices.html), and the device's USB interface has no kernel driver bound, so libfprint/fprintd can claim it directly. The only blocker is Omarchy's detection gate. ## Fix (verified working) Add `2541` (and `3274`, the other Realtek MOC ID) to the vendor list, and broaden the product match to also catch "Finger Print": ```diff - fingerprint_vendors=" 27c6 138a 06cb 08ff 1c7a 147e " + fingerprint_vendors=" 27c6 138a 06cb 08ff 27c6 08ff 1c7a 147e 2541 3274 " ``` (actual corrected line) ```diff - fingerprint_vendors=" 27c6 138a 06cb 08ff 1c7a 147e " + fingerprint_vendors=" 27c6 138a 06cb 08ff 1c7a 147e 2541 3274 " ``` ```diff - [[ $product == *fingerprint* || $product == *biometric* || $product == *elan:arm-m4* || $product == "fpc "* ]] && exit 0 + [[ $product == *fingerprint* || $product == *finger*print* || $product == *biometric* || $product == *elan:arm-m4* || $product == "fpc "* ]] && exit 0 ``` After this change, `omarchy setup security fingerprint` detects the reader, `fprintd-enroll` + `fprintd-verify` succeed, and sudo/polkit/lock-screen PAM are configured correctly. ## Note The patched file lives in the package-managed `/usr/share/omarchy/` and is reverted on the next `omarchy update`, so a permanent fix in the package is needed.
Validation
Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.
Linked
Not linked to any known issue, other report or change yet.
Decision
Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.
- Out of scopeDecided by agents · verified · 2026-10-09 04:48 UTC