etlegacy32-bin
The package downloads a binary release from the project's official domain (etlegacy.com), which is a non-whitelisted but legitimate host for the project; the source is not executed in a dangerous way and the build uses official project-provided assets.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package downloads a binary release from the project's official domain (etlegacy.com), which is a non-whitelisted but legitimate host for the project; the source is not executed in a dangerous way and the build uses official project-provided assets.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:30
"https://www.etlegacy.com/download/file/787"
PKGBUILD
1 offending line(s) highlighted_pkgbase=etlegacy
pkgname=etlegacy32-bin
pkgdesc="Wolfenstein: Enemy Territory 2.60b compatible client/server (etlegacy engine, 32 bit), binary release"
pkgver=2.86.2
pkgrel=1
arch=('i686' 'x86_64')
url="http://www.etlegacy.com/"
provides=('etlegacy')
conflicts=('etlegacy' 'etlegacy32-mod')
backup=('etc/xdg/etlegacy/etmain/etl_server.cfg'
'etc/xdg/etlegacy/etmain/legacy.cfg'
'etc/xdg/etlegacy/etmain/campaigncycle.cfg'
'etc/xdg/etlegacy/etmain/lmscycle.cfg'
'etc/xdg/etlegacy/etmain/mapvotecycle.cfg'
'etc/xdg/etlegacy/etmain/objectivecycle.cfg'
'etc/xdg/etlegacy/etlegacy.conf')
install=etlegacy.install
depends=(
"enemy-territory-data"
"lib32-mesa"
"lib32-gcc-libs"
"lib32-glibc"
"lib32-glew"
)
makedepends=("imagemagick" "librsvg")
license=('GPL3')
source=(
"etl_start.sh"
"etlded_start.sh"
"https://www.etlegacy.com/download/file/787"
"https://github.com/etlegacy/etlegacy/archive/refs/tags/v$pkgver.tar.gz")
md5sums=(
'101f6755a6792825b5cd1982fd2ed890'
'76d91573489900d41823a30b0920c784'
'f9670bd3defd48a8455fbbe7a6a1f018'
'c63191bb0e48309140ca896595acbc32'
)
package() {
cd "$_pkgbase-v$pkgver-i386"
install -dm 755 "${pkgdir}"/usr/{bin,lib/${_pkgbase}/,share/{applications,icons,licenses/${_pkgbase},/doc/${_pkgbase}}}
cp -dr --no-preserve='ownership' ./ "${pkgdir}"/usr/lib/${_pkgbase}/
# Executables
install -Dm 755 "${srcdir}"/etl_start.sh "${pkgdir}"/usr/bin/etl.i386
install -Dm 755 "${srcdir}"/etlded_start.sh "${pkgdir}"/usr/bin/etlded.i386
# Incorrect permissions on install, fix
chmod 755 -R "${pkgdir}"/usr/lib/"${_pkgbase}"/legacy/omni-bot
# assets
ln -s /usr/share/enemy-territory/etmain/{pak0,pak1,pak2}.pk3 $pkgdir/usr/lib/$_pkgbase/etmain/
for i in 16 22 24 32 48 64 128 256 512 1024; do
magick -background none ./icons/hicolor/scalable/apps/etl.svg -resize ${i}x${i} -colors 256 ./icons/etl.png
install -Dvm644 ./icons/etl.png \
"$pkgdir/usr/share/icons/hicolor/${i}x${i}/apps/etl.png"
done
install -Dvm644 ./icons/hicolor/scalable/apps/etl.svg \
"$pkgdir/usr/share/icons/hicolor/scalable/apps/etl.svg"
# manpages
cp -dr --no-preserve='ownership' "./man" "${pkgdir}"/usr/share/
# applications
cp -dr --no-preserve='ownership' "./applications" "${pkgdir}"/usr/share/
#licenses
cp -dr --no-preserve='ownership' "./licenses" "${pkgdir}"/usr/share/
# doc
mkdir -p $pkgdir/usr/share/doc/$_pkgbase
install -m 644 "${srcdir}"/"$_pkgbase-$pkgver"/docs/game/anticheat.html $pkgdir/usr/share/doc/$_pkgbase/
# systemd
mkdir -p $pkgdir/etc/xdg/$_pkgbase/etmain
mkdir -p $pkgdir/usr/lib/systemd/system
install -m 644 "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.conf $pkgdir/etc/xdg/$_pkgbase/
sed -i 's/@BIN_DESCRIBE@/(32 bit)/g' "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.service.in
sed -i 's/@BIN_SUFFIX@/.i386/g' "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.service.in
install -m 644 "${srcdir}"/"$_pkgbase-$pkgver"/misc/etlegacy.service.in $pkgdir/usr/lib/systemd/system/etlegacy-x86.service
# config
mv $pkgdir/usr/lib/$_pkgbase/etmain/*.cfg $pkgdir/etc/xdg/$_pkgbase/etmain/
ln -s /etc/xdg/$_pkgbase/etmain/{etl_server,legacy,{campaign,lms,mapvote,objective}cycle}.cfg $pkgdir/usr/lib/$_pkgbase/etmain/
# server
mkdir -p $pkgdir/var/lib/$_pkgbase-server
ln -s /etc/xdg/$_pkgbase/etmain $pkgdir/var/lib/$_pkgbase-server/
}
Changes since previous scan
--- PKGBUILD @ 2026-10-28 00:06+++ PKGBUILD @ 2026-11-01 00:21@@ -1,7 +1,7 @@ _pkgbase=etlegacy pkgname=etlegacy32-bin pkgdesc="Wolfenstein: Enemy Territory 2.60b compatible client/server (etlegacy engine, 32 bit), binary release"-pkgver=2.85.0+pkgver=2.86.2 pkgrel=1 arch=('i686' 'x86_64') url="http://www.etlegacy.com/"@@ -27,13 +27,13 @@ source=( "etl_start.sh" "etlded_start.sh"- "https://www.etlegacy.com/download/file/730"+ "https://www.etlegacy.com/download/file/787" "https://github.com/etlegacy/etlegacy/archive/refs/tags/v$pkgver.tar.gz") md5sums=( '101f6755a6792825b5cd1982fd2ed890' '76d91573489900d41823a30b0920c784'- '8de93ee4fb13e81cfa761af7407370f5'- '84ceb797a74f8384061db043f5db0942'+ 'f9670bd3defd48a8455fbbe7a6a1f018'+ 'c63191bb0e48309140ca896595acbc32' ) package() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 19:50:31 | Medium | 1 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |