aquacontrol

LOW

maintainer raffaele-90 0 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package installs systemd services and creates a privileged group for configuration access, which is legitimate for hardware control software; the flagged sudoers removal is for backward compatibility and does not indicate malicious privileged installation.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package installs systemd services and creates a privileged group for configuration access, which is legitimate for hardware control software; the flagged sudoers removal is for backward compatibility and does not indicate malicious privileged installation.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

.install:25 rm -f /etc/sudoers.d/99-aquacontrol-shutdown

PKGBUILD

      1# AquaControl
    
      2# Copyright (C) 2026 Raffaele Schiavone
    
      3#
    
      4# This program is free software: you can redistribute it and/or modify
    
      5# it under the terms of the GNU General Public License as published by
    
      6# the Free Software Foundation, either version 3 of the License, or
    
      7# (at your option) any later version.
    
      8#
    
      9# This program is distributed in the hope that it will be useful,
    
      10# but WITHOUT ANY WARRANTY; without even the implied warranty of
    
      11# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    
      12# GNU General Public License for more details.
    
      13#
    
      14# You should have received a copy of the GNU General Public License
    
      15# along with this program.  If not, see <http://www.gnu.org/licenses/>.
    
      16
    
      17pkgname=aquacontrol
    
      18pkgver=5.0.1
    
      19pkgrel=1
    
      20pkgdesc="Control suite for Aquaero 6 LT and Farbwerk 360"
    
      21arch=('any')
    
      22url="https://github.com/raffaele-90/aquacontrol"
    
      23license=('GPL3')
    
      24depends=('python' 'pyside6' 'python-hidapi')
    
      25optdepends=('python-pynvml: Nvidia GPU sensor readings'
    
      26            'libpulse: alarm sound playback (paplay)')
    
      27provides=('aquacontrol')
    
      28conflicts=('openaquaero')
    
      29replaces=('openaquaero')
    
      30install="aquacontrol.install"
    
      31source=("$pkgname-$pkgver.tar.gz::https://github.com/raffaele-90/aquacontrol/archive/refs/tags/v$pkgver.tar.gz")
    
      32sha256sums=('6e34ffd3a815bf6eac4735159f9888fbea493b05639d6bcf98db3138f8b85b22')
    
      33
    
      34package() {
    
      35    cd "$pkgname-$pkgver"
    
      36
    
      37    # Directory di sistema.
    
      38    install -dm755 "$pkgdir/usr/lib/$pkgname"
    
      39    install -dm755 "$pkgdir/usr/bin"
    
      40    install -dm755 "$pkgdir/usr/share/applications"
    
      41    install -dm755 "$pkgdir/usr/share/icons/hicolor/512x512/apps"
    
      42    install -dm755 "$pkgdir/usr/lib/systemd/system"   # servizio di sistema (demone root)
    
      43    install -dm755 "$pkgdir/usr/lib/systemd/user"     # servizio utente (agent di sessione)
    
      44
    
      45    # Codice Python e assets
    
      46    install -m644 *.py "$pkgdir/usr/lib/$pkgname/"
    
      47    cp -r assets "$pkgdir/usr/lib/$pkgname/"
    
      48    find "$pkgdir/usr/lib/$pkgname/assets" -type d -exec chmod 755 {} +
    
      49    find "$pkgdir/usr/lib/$pkgname/assets" -type f -exec chmod 644 {} +
    
      50
    
      51    # Wrapper della GUI
    
      52    echo '#!/bin/bash' > "$pkgdir/usr/bin/$pkgname"
    
      53    echo 'exec python3 /usr/lib/aquacontrol/main.py "$@"' >> "$pkgdir/usr/bin/$pkgname"
    
      54    chmod 755 "$pkgdir/usr/bin/$pkgname"
    
      55
    
      56    # Servizio di SISTEMA (demone root)
    
      57    cat > "$pkgdir/usr/lib/systemd/system/aquacontrold.service" <<'EOF'
    
      58[Unit]
    
      59Description=AquaControl Hardware Daemon (root)
    
      60After=multi-user.target
    
      61
    
      62[Service]
    
      63Type=simple
    
      64ExecStart=/usr/bin/python3 /usr/lib/aquacontrol/aquacontrold.py
    
      65Restart=on-failure
    
      66User=root
    
      67
    
      68[Install]
    
      69WantedBy=multi-user.target
    
      70EOF
    
      71
    
      72    # Servizio UTENTE (agent di sessione)
    
      73    cat > "$pkgdir/usr/lib/systemd/user/aquacontrol-agent.service" <<'EOF'
    
      74[Unit]
    
      75Description=AquaControl Session Agent (alarm reaction, login diagnostics)
    
      76After=graphical-session.target
    
      77PartOf=graphical-session.target
    
      78
    
      79[Service]
    
      80Type=simple
    
      81ExecStart=/usr/bin/python3 /usr/lib/aquacontrol/aquacontrol-agent.py
    
      82Restart=on-failure
    
      83
    
      84[Install]
    
      85WantedBy=graphical-session.target
    
      86EOF
    
      87
    
      88    # File .desktop
    
      89    cat > "$pkgdir/usr/share/applications/$pkgname.desktop" <<EOF
    
      90[Desktop Entry]
    
      91Name=AquaControl
    
      92Comment=Control suite for Aquaero 6 LT and Farbwerk 360
    
      93Exec=/usr/bin/$pkgname
    
      94Icon=$pkgname
    
      95Terminal=false
    
      96Type=Application
    
      97Categories=System;HardwareSettings;
    
      98EOF
    
      99    chmod 644 "$pkgdir/usr/share/applications/$pkgname.desktop"
    
      100
    
      101    # Icona
    
      102    install -m644 "$pkgname.png" "$pkgdir/usr/share/icons/hicolor/512x512/apps/"
    
      103}
    
      104

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2