gnome-night-shift-git

maintainer christophermca · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package installs systemd user units and shell/Python scripts from its own git repository to manage theme switching; the 'privileged install' flag is a false positive as it only enables user-level services, not system privileges or self-updates via sudo/setuid.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package installs systemd user units and shell/Python scripts from its own git repository to manage theme switching; the 'privileged install' flag is a false positive as it only enables user-level services, not system privileges or self-updates via sudo/setuid.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

PKGBUILD:30 install -Dm644 $srcdir/$pkgname/app/home/config/systemd/user/auto-update-gnome-theme.service "$pkgdir/usr/lib/systemd/user/auto-update-gnome-theme.service"
PKGBUILD:31 install -Dm644 $srcdir/$pkgname/app/home/config/systemd/user/auto-update-gnome-theme.path "$pkgdir/usr/lib/systemd/user/auto-update-gnome-theme.path"
PKGBUILD:40 install -Dm755 $srcdir/$pkgname/app/home/local/bin/auto-update-gnome-theme.sh "$pkgdir/usr/lib/gnome-night-shift/bin/auto-update-gnome-theme.sh"
.install:4 echo -e "\`systemctl --user enable --now gnome-night-shift.timer get-sunrise-sunset.timer auto-update-gnome-theme\`"

PKGBUILD

3 offending line(s) highlighted

      1# Maintainer: Christopher McAdams <mca.christopher@gmail.com>
    
      2pkgname="gnome-night-shift-git"
    
      3pkgver=r24.53b3991
    
      4pkgrel=2
    
      5pkgdesc="::Rolling release:: A Small utility to switch the selected preferred mode."
    
      6arch=('any')
    
      7url="https://github.com/christophermca/gnome-night-shift"
    
      8license=('GPL-1.0-or-later')
    
      9makedepends=('git')
    
      10provides=('get-sunrise-sunset.service' 'get-sunrise-sunset.timer' 'gnome-night-shift.service' 'gnome-night-shift.timer' 'auto-update-gnome-theme.path' 'auto-update-gnome-theme.service')
    
      11conflicts=( 'gnome-mode-shift-git'
    
      12            'alacritty-use-theme-with-redshift'
    
      13            'alacritty-use-theme-with-redshift-git')
    
      14source=("$pkgname::git+https://github.com/christophermca/gnome-night-shift.git/")
    
      15sha256sums=('SKIP')
    
      16depends=( 'bash' 'python' )
    
      17
    
      18pkgver() {
    
      19   cd "$pkgname"
    
      20   printf "r%s.%s" "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      21}
    
      22
    
      23   package() {
    
      24      cd "$pkgname"
    
      25      # options and directives that can be overridden
    
      26      pkgdesc="::Rolling release:: Changes gnomes perferred mode based on sunrise/sunset"
    
      27      install=gnome-night-shift-git.install
    
      28
    
      29      # systemd units
    
      30      install -Dm644 $srcdir/$pkgname/app/home/config/systemd/user/auto-update-gnome-theme.service "$pkgdir/usr/lib/systemd/user/auto-update-gnome-theme.service"
    
      31      install -Dm644 $srcdir/$pkgname/app/home/config/systemd/user/auto-update-gnome-theme.path "$pkgdir/usr/lib/systemd/user/auto-update-gnome-theme.path"
    
      32
    
      33      install -Dm644 $srcdir/$pkgname/app/home/config/systemd/user/get-sunrise-sunset.service "$pkgdir/usr/lib/systemd/user/get-sunrise-sunset.service"
    
      34      install -Dm644 $srcdir/$pkgname/app/home/config/systemd/user/get-sunrise-sunset.timer "$pkgdir/usr/lib/systemd/user/get-sunrise-sunset.timer"
    
      35
    
      36      install -Dm644 $srcdir/$pkgname/app/home/config/systemd/user/gnome-night-shift.service "$pkgdir/usr/lib/systemd/user/gnome-night-shift.service"
    
      37      install -Dm644 $srcdir/$pkgname/app/home/config/systemd/user/gnome-night-shift.timer "$pkgdir/usr/lib/systemd/user/gnome-night-shift.timer"
    
      38
    
      39      # scripts
    
      40      install -Dm755 $srcdir/$pkgname/app/home/local/bin/auto-update-gnome-theme.sh "$pkgdir/usr/lib/gnome-night-shift/bin/auto-update-gnome-theme.sh"
    
      41      install -Dm755 $srcdir/$pkgname/app/home/local/bin/get-sunrise-sunset.py "$pkgdir/usr/lib/gnome-night-shift/bin/get-sunrise-sunset.py"
    
      42      install -Dm755 $srcdir/$pkgname/app/home/local/bin/is_day_or_night.sh "$pkgdir/usr/lib/gnome-night-shift/bin/is_day_or_night.sh"
    
      43
    
      44      # vars
    
      45      install -Dm644 $srcdir/$pkgname/app/home/local/gnome-night-shift/shared-variables.sh "$pkgdir/usr/lib/gnome-night-shift/shared-variables.sh"
    
      46  }
    
      47

Changes since previous scan

--- PKGBUILD @ 2026-07-31 05:17
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,7 +1,7 @@
 # Maintainer: Christopher McAdams <mca.christopher@gmail.com>
 pkgname="gnome-night-shift-git"
-pkgver=r23.a3e04d5
-pkgrel=1
+pkgver=r24.53b3991
+pkgrel=2
 pkgdesc="::Rolling release:: A Small utility to switch the selected preferred mode."
 arch=('any')
 url="https://github.com/christophermca/gnome-night-shift"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 15:18:17	MEDIUM	2
2026-07-31 05:17:13	MEDIUM	2
2026-07-31 00:14:10	LOW	3
2026-07-30 19:16:23	MEDIUM	2
2026-07-30 00:17:23	LOW	3
2026-07-29 00:25:53	LOW	3
2026-07-28 00:07:28	LOW	3
2026-07-27 00:24:32	LOW	3
2026-07-26 00:07:32	LOW	3
2026-07-25 00:13:44	LOW	3
2026-07-24 00:02:28	LOW	3
2026-07-23 00:14:47	LOW	3
2026-07-22 00:29:32	LOW	3
2026-07-21 00:24:15	LOW	3
2026-07-20 00:19:49	LOW	3
2026-07-19 00:17:08	LOW	3
2026-07-18 00:14:48	LOW	3