etlegacy32-bin
The download from etlegacy.com is a binary release of the official etlegacy engine, hosted on the project's own domain; despite the non-whitelisted host pattern, it is a legitimate source for the software, and the package does not execute untrusted remote code or install from ambiguous third-party locations.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The download from etlegacy.com is a binary release of the official etlegacy engine, hosted on the project's own domain; despite the non-whitelisted host pattern, it is a legitimate source for the software, and the package does not execute untrusted remote code or install from ambiguous third-party locations.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:30
"https://www.etlegacy.com/download/file/730"
PKGBUILD
1 offending line(s) highlighted_pkgbase=etlegacy
pkgname=etlegacy32-bin
pkgdesc="Wolfenstein: Enemy Territory 2.60b compatible client/server (etlegacy engine, 32 bit), binary release"
pkgver=2.85.0
pkgrel=1
arch=('i686' 'x86_64')
url="http://www.etlegacy.com/"
provides=('etlegacy')
conflicts=('etlegacy' 'etlegacy32-mod')
backup=('etc/xdg/etlegacy/etmain/etl_server.cfg'
'etc/xdg/etlegacy/etmain/legacy.cfg'
'etc/xdg/etlegacy/etmain/campaigncycle.cfg'
'etc/xdg/etlegacy/etmain/lmscycle.cfg'
'etc/xdg/etlegacy/etmain/mapvotecycle.cfg'
'etc/xdg/etlegacy/etmain/objectivecycle.cfg'
'etc/xdg/etlegacy/etlegacy.conf')
install=etlegacy.install
depends=(
"enemy-territory-data"
"lib32-mesa"
"lib32-gcc-libs"
"lib32-glibc"
"lib32-glew"
)
makedepends=("imagemagick" "librsvg")
license=('GPL3')
source=(
"etl_start.sh"
"etlded_start.sh"
"https://www.etlegacy.com/download/file/730"
"https://github.com/etlegacy/etlegacy/archive/refs/tags/v$pkgver.tar.gz")
md5sums=(
'101f6755a6792825b5cd1982fd2ed890'
'76d91573489900d41823a30b0920c784'
'8de93ee4fb13e81cfa761af7407370f5'
'84ceb797a74f8384061db043f5db0942'
)
package() {
cd "$_pkgbase-v$pkgver-i386"
install -dm 755 "${pkgdir}"/usr/{bin,lib/${_pkgbase}/,share/{applications,icons,licenses/${_pkgbase},/doc/${_pkgbase}}}
cp -dr --no-preserve='ownership' ./ "${pkgdir}"/usr/lib/${_pkgbase}/
# Executables
install -Dm 755 "${srcdir}"/etl_start.sh "${pkgdir}"/usr/bin/etl.i386
install -Dm 755 "${srcdir}"/etlded_start.sh "${pkgdir}"/usr/bin/etlded.i386
# Incorrect permissions on install, fix
chmod 755 -R "${pkgdir}"/usr/lib/"${_pkgbase}"/legacy/omni-bot
# assets
ln -s /usr/share/enemy-territory/etmain/{pak0,pak1,pak2}.pk3 $pkgdir/usr/lib/$_pkgbase/etmain/
for i in 16 22 24 32 48 64 128 256 512 1024; do
magick -background none ./icons/hicolor/scalable/apps/etl.svg -resize ${i}x${i} -colors 256 ./icons/etl.png
install -Dvm644 ./icons/etl.png \
"$pkgdir/usr/share/icons/hicolor/${i}x${i}/apps/etl.png"
done
install -Dvm644 ./icons/hicolor/scalable/apps/etl.svg \
"$pkgdir/usr/share/icons/hicolor/scalable/apps/etl.svg"
# manpages
cp -dr --no-preserve='ownership' "./man" "${pkgdir}"/usr/share/
# applications
cp -dr --no-preserve='ownership' "./applications" "${pkgdir}"/usr/share/
#licenses
cp -dr --no-preserve='ownership' "./licenses" "${pkgdir}"/usr/share/
# doc
mkdir -p $pkgdir/usr/share/doc/$_pkgbase
install -m 644 "${srcdir}"/"$_pkgbase-$pkgver"/docs/game/anticheat.html $pkgdir/usr/share/doc/$_pkgbase/
# systemd
mkdir -p $pkgdir/etc/xdg/$_pkgbase/etmain
mkdir -p $pkgdir/usr/lib/systemd/system
install -m 644 "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.conf $pkgdir/etc/xdg/$_pkgbase/
sed -i 's/@BIN_DESCRIBE@/(32 bit)/g' "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.service.in
sed -i 's/@BIN_SUFFIX@/.i386/g' "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.service.in
install -m 644 "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.service.in $pkgdir/usr/lib/systemd/system/etlegacy-x86.service
# config
mv $pkgdir/usr/lib/$_pkgbase/etmain/*.cfg $pkgdir/etc/xdg/$_pkgbase/etmain/
ln -s /etc/xdg/$_pkgbase/etmain/{etl_server,legacy,{campaign,lms,mapvote,objective}cycle}.cfg $pkgdir/usr/lib/$_pkgbase/etmain/
# server
mkdir -p $pkgdir/var/lib/$_pkgbase-server
ln -s /etc/xdg/$_pkgbase/etmain $pkgdir/var/lib/$_pkgbase-server/
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 11:38:52 | Medium | 1 |