Proof Portal

Project overview

Omarchy

ProbeLabs65 findings · 95 requirements

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

Inbox
ReportR-1645GitHub issuePublicDecided· Out of scope

Fingerprint reader not detected: Minisforum AI X1 Pro (Realtek 2541:fa03)

Reported by Zyliax · filed Aug 19, 2026 · open at source

Decided: Out of scope — decided by agents · verified 4 days ago.

At a glance

1 · What is claimed?
Only the report text below — no validator has restated it as checkable claims yet.
2 · What does it affect?
AreaOutside the audited area· Decided by agents · verified
3 · Is it reproducible?
No validation has been run yet.
4 · What remains unclear?
  • Not validated yet: no claims, no reproducer.
5 · What happens next?
Decided by agents and verified by a second, independent agent — see the decision.

Original report

Fingerprint reader not detected: Minisforum AI X1 Pro (Realtek 2541:fa03)revision 1 · captured 2026-09-28 21:29 UTC via poll

Environment

  • Omarchy version: 4.0.0-1
  • Hardware: Minisforum AI X1 Pro (AMD Ryzen AI 9 HX 470)
  • Fingerprint reader: USB 2541:fa03 — "Realtek USB2.0 Finger Print Bridge"

Symptom

omarchy setup security fingerprint aborts immediately:

Setting up fingerprint scanner for authentication.

No fingerprint sensor detected.

Root cause

The detection script /usr/share/omarchy/bin/omarchy-hw-fingerprint misses this reader for two reasons:

  1. Vendor 2541 is not in fingerprint_vendors (27c6 138a 06cb 08ff 1c7a 147e).
  2. The reader's product string is "Finger Print" (two words), but the product match only catches the single word *fingerprint*:
[[ $product == *fingerprint* || $product == *biometric* || ... ]] && exit 0

Note: 2541:fa03 is a supported device in libfprint (listed as "Realtek MOC Fingerprint Sensor" on https://fprint.freedesktop.org/supported-devices.html), and the device's USB interface has no kernel driver bound, so libfprint/fprintd can claim it directly. The only blocker is Omarchy's detection gate.

Fix (verified working)

Add 2541 (and 3274, the other Realtek MOC ID) to the vendor list, and broaden the product match to also catch "Finger Print":

- fingerprint_vendors=" 27c6 138a 06cb 08ff 1c7a 147e "
+ fingerprint_vendors=" 27c6 138a 06cb 08ff 27c6 08ff 1c7a 147e 2541 3274 "

(actual corrected line)

- fingerprint_vendors=" 27c6 138a 06cb 08ff 1c7a 147e "
+ fingerprint_vendors=" 27c6 138a 06cb 08ff 1c7a 147e 2541 3274 "
-     [[ $product == *fingerprint* || $product == *biometric* || $product == *elan:arm-m4* || $product == "fpc "* ]] && exit 0
+     [[ $product == *fingerprint* || $product == *finger*print* || $product == *biometric* || $product == *elan:arm-m4* || $product == "fpc "* ]] && exit 0

After this change, omarchy setup security fingerprint detects the reader, fprintd-enroll + fprintd-verify succeed, and sudo/polkit/lock-screen PAM are configured correctly.

Note

The patched file lives in the package-managed /usr/share/omarchy/ and is reverted on the next omarchy update, so a permanent fix in the package is needed.

View raw text
## Environment
- Omarchy version: 4.0.0-1
- Hardware: Minisforum AI X1 Pro (AMD Ryzen AI 9 HX 470)
- Fingerprint reader: USB `2541:fa03` — "Realtek USB2.0 Finger Print Bridge"

## Symptom
`omarchy setup security fingerprint` aborts immediately:

```
Setting up fingerprint scanner for authentication.

No fingerprint sensor detected.
```

## Root cause
The detection script `/usr/share/omarchy/bin/omarchy-hw-fingerprint` misses this reader for two reasons:

1. Vendor `2541` is not in `fingerprint_vendors` (`27c6 138a 06cb 08ff 1c7a 147e`).
2. The reader's product string is **"Finger Print"** (two words), but the product match only catches the single word `*fingerprint*`:

```bash
[[ $product == *fingerprint* || $product == *biometric* || ... ]] && exit 0
```

Note: `2541:fa03` is a **supported device** in libfprint (listed as "Realtek MOC Fingerprint Sensor" on https://fprint.freedesktop.org/supported-devices.html), and the device's USB interface has no kernel driver bound, so libfprint/fprintd can claim it directly. The only blocker is Omarchy's detection gate.

## Fix (verified working)
Add `2541` (and `3274`, the other Realtek MOC ID) to the vendor list, and broaden the product match to also catch "Finger Print":

```diff
- fingerprint_vendors=" 27c6 138a 06cb 08ff 1c7a 147e "
+ fingerprint_vendors=" 27c6 138a 06cb 08ff 27c6 08ff 1c7a 147e 2541 3274 "
```

(actual corrected line)
```diff
- fingerprint_vendors=" 27c6 138a 06cb 08ff 1c7a 147e "
+ fingerprint_vendors=" 27c6 138a 06cb 08ff 1c7a 147e 2541 3274 "
```

```diff
-     [[ $product == *fingerprint* || $product == *biometric* || $product == *elan:arm-m4* || $product == "fpc "* ]] && exit 0
+     [[ $product == *fingerprint* || $product == *finger*print* || $product == *biometric* || $product == *elan:arm-m4* || $product == "fpc "* ]] && exit 0
```

After this change, `omarchy setup security fingerprint` detects the reader, `fprintd-enroll` + `fprintd-verify` succeed, and sudo/polkit/lock-screen PAM are configured correctly.

## Note
The patched file lives in the package-managed `/usr/share/omarchy/` and is reverted on the next `omarchy update`, so a permanent fix in the package is needed.

Validation

Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.

Linked

Not linked to any known issue, other report or change yet.

Decision

Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.

  • Out of scopeDecided by agents · verified · 2026-10-09 04:48 UTC