ekipyt

LOW

maintainer Ekip 0 votes scanned 2026-10-24 00:14:55.209548

View on AUR

Why flagged

The package installs a SUID binary as part of its intended functionality, which is a legitimate use case for privilege escalation tools, and all actions are transparent and self-contained within the package.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package installs a SUID binary as part of its intended functionality, which is a legitimate use case for privilege escalation tools, and all actions are transparent and self-contained within the package.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

.install:3 chmod 4755 /usr/bin/yt

PKGBUILD

      1# The MIT License (MIT)
    
      2# Copyright © 2026 Yalçın Mete Kızılgün
    
      3
    
      4# Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
    
      5
    
      6# The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
    
      7
    
      8# THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
    
      9
    
      10# Maintainer: Yalçın Mete Kızılgün <kizilgunmete@gmail.com>
    
      11pkgname=ekipyt
    
      12pkgver=1.1
    
      13pkgrel=2
    
      14pkgdesc="Minimal ve güvenli yetki aracı, onepass ve custom PAM servisi ile"
    
      15arch=('x86_64')
    
      16url="https://github.com/Hardcore-Team/yt-source" 
    
      17license=('MIT')
    
      18depends=('pam' 'gcc')
    
      19sha256sums=('e2e1ffc0c146ed5d6a08cf738ffa61398f04d7ffb4ae63fb1669a51d7a2b9073'
    
      20            '146e04aa05345680dd6c220630390432bf45009fcf94a347131d9c311875027e'
    
      21            'dc17b21c82ef63f4351cb66b8f1a3324843eef82404790773796c1f1ac6aefa3')
    
      22source=("yt.c" "yt.cfg" "yt.pam")
    
      23install=ekipyt.install
    
      24
    
      25build() {
    
      26    # -D_FORTIFY_SOURCE=2, -fstack-protector-strong: tampon taşması tespiti
    
      27    # -z relro -z now: GOT'u salt-okunur yap, symbol'leri eager bind et
    
      28    # -pie: adres uzayı rastgeleleştirmesinden (ASLR) tam yararlan
    
      29    # Bunlar SUID-root bir binary için standart sertleştirme bayraklarıdır.
    
      30    gcc -Wall -Wextra -O2 -D_FORTIFY_SOURCE=2 -fstack-protector-strong -fPIE \
    
      31        -Wl,-z,relro,-z,now -pie \
    
      32        -o yt yt.c -lpam -lpam_misc
    
      33}
    
      34
    
      35package() {
    
      36    # Binary kur
    
      37    install -Dm755 yt "$pkgdir/usr/bin/yt"
    
      38
    
      39    # Root-only config, default onepass
    
      40    install -Dm600 yt.cfg "$pkgdir/etc/yt.cfg"
    
      41    chown root:root "$pkgdir/etc/yt.cfg"
    
      42
    
      43    # Onepass dizini (boş)
    
      44    install -d -m700 "$pkgdir/tmp/yt_onepass"
    
      45
    
      46    # PAM servisi kur
    
      47    install -Dm644 yt.pam "$pkgdir/etc/pam.d/yt"
    
      48    chown root:root "$pkgdir/etc/pam.d/yt"
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-24 00:14:55	Low	2
2026-10-23 00:02:19	Low	2
2026-10-22 00:13:10	Low	2
2026-10-21 00:12:50	Low	2
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2