etlegacy32-bin

LOW
maintainer Gr3q 3 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The download from etlegacy.com is a binary release of the official etlegacy engine, hosted on the project's own domain; despite the non-whitelisted host pattern, it is a legitimate source for the software, and the package does not execute untrusted remote code or install from ambiguous third-party locations.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The download from etlegacy.com is a binary release of the official etlegacy engine, hosted on the project's own domain; despite the non-whitelisted host pattern, it is a legitimate source for the software, and the package does not execute untrusted remote code or install from ambiguous third-party locations.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:30 "https://www.etlegacy.com/download/file/730"

PKGBUILD

1 offending line(s) highlighted
1_pkgbase=etlegacy
2pkgname=etlegacy32-bin
3pkgdesc="Wolfenstein: Enemy Territory 2.60b compatible client/server (etlegacy engine, 32 bit), binary release"
4pkgver=2.85.0
5pkgrel=1
6arch=('i686' 'x86_64')
7url="http://www.etlegacy.com/"
8provides=('etlegacy')
9conflicts=('etlegacy' 'etlegacy32-mod')
10backup=('etc/xdg/etlegacy/etmain/etl_server.cfg'
11 'etc/xdg/etlegacy/etmain/legacy.cfg'
12 'etc/xdg/etlegacy/etmain/campaigncycle.cfg'
13 'etc/xdg/etlegacy/etmain/lmscycle.cfg'
14 'etc/xdg/etlegacy/etmain/mapvotecycle.cfg'
15 'etc/xdg/etlegacy/etmain/objectivecycle.cfg'
16 'etc/xdg/etlegacy/etlegacy.conf')
17install=etlegacy.install
18depends=(
19 "enemy-territory-data"
20 "lib32-mesa"
21 "lib32-gcc-libs"
22 "lib32-glibc"
23 "lib32-glew"
24)
25makedepends=("imagemagick" "librsvg")
26license=('GPL3')
27source=(
28 "etl_start.sh"
29 "etlded_start.sh"
30 "https://www.etlegacy.com/download/file/730"
31 "https://github.com/etlegacy/etlegacy/archive/refs/tags/v$pkgver.tar.gz")
32md5sums=(
33 '101f6755a6792825b5cd1982fd2ed890'
34 '76d91573489900d41823a30b0920c784'
35 '8de93ee4fb13e81cfa761af7407370f5'
36 '84ceb797a74f8384061db043f5db0942'
37)
38
39package() {
40 cd "$_pkgbase-v$pkgver-i386"
41 install -dm 755 "${pkgdir}"/usr/{bin,lib/${_pkgbase}/,share/{applications,icons,licenses/${_pkgbase},/doc/${_pkgbase}}}
42 cp -dr --no-preserve='ownership' ./ "${pkgdir}"/usr/lib/${_pkgbase}/
43 # Executables
44 install -Dm 755 "${srcdir}"/etl_start.sh "${pkgdir}"/usr/bin/etl.i386
45 install -Dm 755 "${srcdir}"/etlded_start.sh "${pkgdir}"/usr/bin/etlded.i386
46 # Incorrect permissions on install, fix
47 chmod 755 -R "${pkgdir}"/usr/lib/"${_pkgbase}"/legacy/omni-bot
48 # assets
49 ln -s /usr/share/enemy-territory/etmain/{pak0,pak1,pak2}.pk3 $pkgdir/usr/lib/$_pkgbase/etmain/
50
51 for i in 16 22 24 32 48 64 128 256 512 1024; do
52 magick -background none ./icons/hicolor/scalable/apps/etl.svg -resize ${i}x${i} -colors 256 ./icons/etl.png
53 install -Dvm644 ./icons/etl.png \
54 "$pkgdir/usr/share/icons/hicolor/${i}x${i}/apps/etl.png"
55 done
56
57 install -Dvm644 ./icons/hicolor/scalable/apps/etl.svg \
58 "$pkgdir/usr/share/icons/hicolor/scalable/apps/etl.svg"
59
60 # manpages
61 cp -dr --no-preserve='ownership' "./man" "${pkgdir}"/usr/share/
62
63 # applications
64 cp -dr --no-preserve='ownership' "./applications" "${pkgdir}"/usr/share/
65
66 #licenses
67 cp -dr --no-preserve='ownership' "./licenses" "${pkgdir}"/usr/share/
68
69 # doc
70 mkdir -p $pkgdir/usr/share/doc/$_pkgbase
71 install -m 644 "${srcdir}"/"$_pkgbase-$pkgver"/docs/game/anticheat.html $pkgdir/usr/share/doc/$_pkgbase/
72
73 # systemd
74 mkdir -p $pkgdir/etc/xdg/$_pkgbase/etmain
75 mkdir -p $pkgdir/usr/lib/systemd/system
76 install -m 644 "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.conf $pkgdir/etc/xdg/$_pkgbase/
77 sed -i 's/@BIN_DESCRIBE@/(32 bit)/g' "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.service.in
78 sed -i 's/@BIN_SUFFIX@/.i386/g' "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.service.in
79 install -m 644 "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.service.in $pkgdir/usr/lib/systemd/system/etlegacy-x86.service
80
81 # config
82 mv $pkgdir/usr/lib/$_pkgbase/etmain/*.cfg $pkgdir/etc/xdg/$_pkgbase/etmain/
83 ln -s /etc/xdg/$_pkgbase/etmain/{etl_server,legacy,{campaign,lms,mapvote,objective}cycle}.cfg $pkgdir/usr/lib/$_pkgbase/etmain/
84
85 # server
86 mkdir -p $pkgdir/var/lib/$_pkgbase-server
87 ln -s /etc/xdg/$_pkgbase/etmain $pkgdir/var/lib/$_pkgbase-server/
88}
89

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 11:38:52 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion