awesun-bin

maintainer xifan · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt .deb from the vendor's official domain (dl.oray.com), which is plausibly the project's own infrastructure; the binary is unpacked and installed without remote code execution or obfuscation, and the host, while not whitelisted, is official and specific to the vendor.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt .deb from the vendor's official domain (dl.oray.com), which is plausibly the project's own infrastructure; the binary is unpacked and installed without remote code execution or obfuscation, and the host, while not whitelisted, is official and specific to the vendor.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:18 source=("LICENSE::https://service.oray.com/question/1820.html")
PKGBUILD:19 source_x86_64=("awesun-16.5.0.30560-x86_64.deb::https://dl.oray.com/sl/linux/awesun-16.5.0.30560-x86_64.deb")

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: xifan <xifan2333@gmail.com>
    
      2# NOTE: This is an unofficial, community-maintained package.
    
      3
    
      4pkgname=awesun-bin
    
      5_pkgname=awesun
    
      6pkgver=16.5.0.30560
    
      7pkgrel=2
    
      8pkgdesc="AweSun remote control client for Linux (Unofficial Community Package)"
    
      9arch=('x86_64')
    
      10url="https://sunlogin.oray.com/download/linux"
    
      11license=('custom')
    
      12depends=('gtk3' 'libappindicator-gtk3' 'webkit2gtk-4.1' 'libnotify' 'util-linux-libs' 'libepoxy' 'libxcrypt-compat')
    
      13provides=("${_pkgname}" 'sunloginclient' 'sunlogin')
    
      14conflicts=("${_pkgname}" 'sunloginclient' 'sunlogin' 'sunloginenterprise' 'awesunhost' 'awesuncli')
    
      15options=(!strip emptydirs)
    
      16install="${pkgname}.install"
    
      17backup=('etc/orayconfig.conf')
    
      18source=("LICENSE::https://service.oray.com/question/1820.html")
    
      19source_x86_64=("awesun-16.5.0.30560-x86_64.deb::https://dl.oray.com/sl/linux/awesun-16.5.0.30560-x86_64.deb")
    
      20sha256sums=('SKIP')
    
      21sha256sums_x86_64=('eda3fffe6d5324afbc4f939f0cb85c08b7851efad3c01878621474ec7503d10f')
    
      22
    
      23package() {
    
      24	cd "${srcdir}"
    
      25
    
      26	bsdtar -xf "${_pkgname}-${pkgver}-x86_64.deb"
    
      27	bsdtar -xf data.tar.xz
    
      28
    
      29	install -d "${pkgdir}/opt/${_pkgname}"
    
      30	cp -a "usr/local/${_pkgname}/." "${pkgdir}/opt/${_pkgname}/"
    
      31	chown -R root:root "${pkgdir}/opt/${_pkgname}"
    
      32
    
      33	install -Dm644 "usr/share/applications/${_pkgname}.desktop" \
    
      34		"${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      35	install -Dm644 "${pkgdir}/opt/${_pkgname}/scripts/run${_pkgname}.service" \
    
      36		"${pkgdir}/usr/lib/systemd/system/run${_pkgname}.service"
    
      37	install -Dm644 "${pkgdir}/opt/${_pkgname}/${_pkgname}.png" \
    
      38		"${pkgdir}/usr/share/pixmaps/${_pkgname}.png"
    
      39	install -Dm644 "${srcdir}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      40
    
      41	install -dm755 "${pkgdir}/usr/bin"
    
      42	ln -s "/opt/${_pkgname}/${_pkgname}" "${pkgdir}/usr/bin/${_pkgname}"
    
      43
    
      44	install -Dm644 /dev/null "${pkgdir}/etc/orayconfig.conf"
    
      45	install -dm777 "${pkgdir}/var/log/${_pkgname}"
    
      46
    
      47	local old_path="/usr/local/${_pkgname}"
    
      48	local new_path="/opt/${_pkgname}"
    
      49	local padded_path="///////opt/${_pkgname}"
    
      50
    
      51	while IFS= read -r -d '' file; do
    
      52		sed -i "s#${old_path}#${padded_path}#g" "${file}"
    
      53	done < <(grep -RslZ "${old_path}" \
    
      54		"${pkgdir}/opt/${_pkgname}" \
    
      55		"${pkgdir}/usr/share/applications/${_pkgname}.desktop" \
    
      56		"${pkgdir}/usr/lib/systemd/system/run${_pkgname}.service")
    
      57
    
      58	find "${pkgdir}/opt/${_pkgname}/scripts" -type f \
    
      59		-exec sed -i "s#${padded_path}#${new_path}#g" {} +
    
      60	sed -i \
    
      61		-e "s#${padded_path}#${new_path}#g" \
    
      62		-e "s#^Icon=.*#Icon=${_pkgname}#" \
    
      63		"${pkgdir}/usr/share/applications/${_pkgname}.desktop"
    
      64	sed -i "s#${padded_path}#${new_path}#g" \
    
      65		"${pkgdir}/usr/lib/systemd/system/run${_pkgname}.service"
    
      66}
    
      67

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2