Proof Portal
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
Legacy user-owned Plymouth directory prevents unlock theme application
Reported by themuslimdoctor · filed Sep 12, 2026 · open at source
At a glance
- 1 · What is claimed?
- Only the report text below — no validator has restated it as checkable claims yet.
- 2 · What does it affect?
- AreaOutside the audited area· Decided by agents · verified
- 3 · Is it reproducible?
- No validation has been run yet.
- 4 · What remains unclear?
- Not validated yet: no claims, no reproducer.
- 5 · What happens next?
- Decided by agents and verified by a second, independent agent — see the decision.
Original report
System details
Omarchy 4.0.3-1; omarchy-settings 4.0.3-1; Plymouth and SDDM. This report intentionally contains only non-identifying technical details; no full diagnostics or screenshots are attached.
What's wrong?
Selecting a non-default boot unlock theme on an upgraded installation could not apply the selection. The default artwork remained installed and appeared again at reboot. The blocker was legacy metadata on /usr/share/plymouth/themes/omarchy: the directory was owned by the desktop user and had mode 0700, while the package expects root:root and 0755.
The current omarchy-plymouth-set validates destination directories as root-owned before publishing assets. This correctly rejects the legacy directory, but leaves an affected installation unable to apply an unlock theme until its directory metadata is repaired.
Observed evidence
omarchy plymouth currentreporteddefaultafter the attempted selection.pacman -Qkk omarchy-settingsreported UID, GID, and permission mismatches for/usr/share/plymouth/themes/omarchy.- The installed Plymouth and SDDM logos still matched the packaged default.
- Restoring only that directory to
root:root, mode0755, then running the supported theme setter as the normal user completed successfully. The selected logo matched both installed copies byte-for-byte, and the rebuilt boot image contained the selected artwork and background color. - The kernel and boot parameters were unchanged by that repair. Post-repair visual confirmation at reboot has not yet been performed.
Reproduction conditions
On a disposable test installation with the legacy state already present:
- Use a real, non-symlink Plymouth theme directory at
/usr/share/plymouth/themes/omarchy, owned by the desktop user with mode0700. Its ancestors and packaged source assets otherwise have their normal root ownership. - Select a valid non-default theme through Style > Unlock, or run
omarchy plymouth set by theme <theme>as the normal user and complete the command's own privilege prompt. - The destination ownership check prevents publication; the installed artwork and
omarchy plymouth currentremain unchanged. - After restoring the destination directory's packaged ownership and permissions, repeat the same theme selection: application succeeds.
The legacy state and successful repair were observed on the affected installation; the original operation that first changed the directory metadata was not recorded.
Relevant upstream history
Commit 695614ce6aa9fdc44f204ad08280813e1a5c4025 changed the older cp -a publication to use --no-preserve=mode,ownership, preventing staging-directory metadata from being copied into the installed theme directory. PR #8934 later introduced the root-ownership validation. This suggests an upgrade-compatibility gap for installations that already retained the older metadata; it does not establish the exact history of this particular directory.
Please consider a supported repair or migration for this legacy state while retaining the publisher's ownership and symlink checks.
Related reports checked
- #6864 and PR #6865 concern package updates overwriting a theme that was applied successfully. This report concerns application being rejected before any new assets are published; reapplying the theme alone fails until the directory ownership is repaired.
- #10036 concerns invoking an older setter under
sudowith missing environment. The affected path here uses the normal user's menu/theme command and its internal elevation. - PR #8934 is the related merged security change, not a request to weaken that validation.
Open and closed issues and PRs were searched for Plymouth/unlock selection, ownership, permissions, legacy directory state, and publication refusal. No existing report specifically covering this legacy-ownership failure was found.
View raw text
### System details Omarchy 4.0.3-1; omarchy-settings 4.0.3-1; Plymouth and SDDM. This report intentionally contains only non-identifying technical details; no full diagnostics or screenshots are attached. ### What's wrong? Selecting a non-default boot unlock theme on an upgraded installation could not apply the selection. The default artwork remained installed and appeared again at reboot. The blocker was legacy metadata on `/usr/share/plymouth/themes/omarchy`: the directory was owned by the desktop user and had mode `0700`, while the package expects `root:root` and `0755`. The current `omarchy-plymouth-set` validates destination directories as root-owned before publishing assets. This correctly rejects the legacy directory, but leaves an affected installation unable to apply an unlock theme until its directory metadata is repaired. #### Observed evidence - `omarchy plymouth current` reported `default` after the attempted selection. - `pacman -Qkk omarchy-settings` reported UID, GID, and permission mismatches for `/usr/share/plymouth/themes/omarchy`. - The installed Plymouth and SDDM logos still matched the packaged default. - Restoring only that directory to `root:root`, mode `0755`, then running the supported theme setter as the normal user completed successfully. The selected logo matched both installed copies byte-for-byte, and the rebuilt boot image contained the selected artwork and background color. - The kernel and boot parameters were unchanged by that repair. Post-repair visual confirmation at reboot has not yet been performed. #### Reproduction conditions On a disposable test installation with the legacy state already present: 1. Use a real, non-symlink Plymouth theme directory at `/usr/share/plymouth/themes/omarchy`, owned by the desktop user with mode `0700`. Its ancestors and packaged source assets otherwise have their normal root ownership. 2. Select a valid non-default theme through Style > Unlock, or run `omarchy plymouth set by theme <theme>` as the normal user and complete the command's own privilege prompt. 3. The destination ownership check prevents publication; the installed artwork and `omarchy plymouth current` remain unchanged. 4. After restoring the destination directory's packaged ownership and permissions, repeat the same theme selection: application succeeds. The legacy state and successful repair were observed on the affected installation; the original operation that first changed the directory metadata was not recorded. #### Relevant upstream history Commit 695614ce6aa9fdc44f204ad08280813e1a5c4025 changed the older `cp -a` publication to use `--no-preserve=mode,ownership`, preventing staging-directory metadata from being copied into the installed theme directory. PR #8934 later introduced the root-ownership validation. This suggests an upgrade-compatibility gap for installations that already retained the older metadata; it does not establish the exact history of this particular directory. Please consider a supported repair or migration for this legacy state while retaining the publisher's ownership and symlink checks. #### Related reports checked - #6864 and PR #6865 concern package updates overwriting a theme that was applied successfully. This report concerns application being rejected before any new assets are published; reapplying the theme alone fails until the directory ownership is repaired. - #10036 concerns invoking an older setter under `sudo` with missing environment. The affected path here uses the normal user's menu/theme command and its internal elevation. - PR #8934 is the related merged security change, not a request to weaken that validation. Open and closed issues and PRs were searched for Plymouth/unlock selection, ownership, permissions, legacy directory state, and publication refusal. No existing report specifically covering this legacy-ownership failure was found.
Validation
Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.
Linked
Not linked to any known issue, other report or change yet.
Decision
Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.
- Out of scopeDecided by agents · verified · 2026-10-09 12:03 UTC