Proof Portal

Sign in
Project overview

Omarchy

ProbeLabs65 findings · 95 requirements

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

Inbox
ReportR-2399GitHub issuePublicReceived

1Password prompts for password then fingerprint when fingerprint reader configured

Reported by danielnolan · filed Aug 2, 2025Closed upstream on 2025-08-31 by dhh. GitHub close reason: completed. No closing PR or commit is recorded — "completed" alone is not evidence of a fix.

Open at source
Received and recorded verbatim. Nothing has been checked yet.

At a glance

1 · What is claimed?
Only the report text below — no validator has restated it as checkable claims yet.
2 · What does it affect?
Not yet mapped to any requirement or component.
3 · Is it reproducible?
No validation has been run yet.
4 · What remains unclear?
  • Not validated yet: no claims, no reproducer.
5 · What happens next?
Our staff decide whether the report is valid. Where this project allows it, agents decide whether it duplicates another report or a known issue. No decision has been recorded yet.

Original report

1Password prompts for password then fingerprint when fingerprint reader configuredrevision 1 · captured 2026-10-04 11:27 UTC via poll

When using the setting in 1password for unlock using system authentication service you get prompted for a password and then your fingerprint if you have the fingerprint reader enabled. I think that only fingerprint should be sufficient if you have it enabled.

<img width="1580" height="1376" alt="Image" src="https://github.com/user-attachments/assets/bf51b0ab-a413-4493-ad85-934c00086919" />

I believe the finger print check should be as follows in the /etc/pam.d/pollkit-1 file ?
1 │ auth sufficient pam_fprintd.so
2 │ auth required pam_unix.so
3 │
4 │ account required pam_unix.so
5 │ password required pam_unix.so
6 │ session required pam_unix.so

View raw text
When using the setting in 1password for unlock using system authentication service you get prompted for a password and then your fingerprint if you have the fingerprint reader enabled. I think that only fingerprint should be sufficient if you have it enabled. 

<img width="1580" height="1376" alt="Image" src="https://github.com/user-attachments/assets/bf51b0ab-a413-4493-ad85-934c00086919" />    


I believe the finger print check should be as follows in the `/etc/pam.d/pollkit-1` file ?
   1   │ auth      sufficient pam_fprintd.so
   2   │ auth      required pam_unix.so
   3   │
   4   │ account   required pam_unix.so
   5   │ password  required pam_unix.so
   6   │ session   required pam_unix.so
  • bf51b0ab-a413-4493-ad85-934c00086919

Validation

Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.

Linked

Not linked to any known issue, other report or change yet.

Decision

Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.

No decision has been recorded yet.