icingaweb2-module-director-git
MEDIUM
maintainer C0rn3j
1 votes
scanned 2026-10-05 23:40:58.404909
Why flagged
The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.
Triggered rules
Medium
Privileged / out-of-pacman install (sudoers, setuid, or self-update)
privileged_install
The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.
-
PKGBUILD:35
chmod 2770 "${pkgdir}/etc/icingaweb2"
Medium
Recently orphaned & re-adopted
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Martin Rys <https://rys.rs/contact>
2
# Contributor: Daniel Bodky <dbodky@gmail.com>
3
# Contributor: Malte Rabenseifner <mail@malte-rabenseifner.de>
4
5
pkgname=icingaweb2-module-director-git
6
pkgver=1.12.0.r2.g4554f5be
7
pkgrel=1
8
pkgdesc="Manage Icinga 2 configuration from Icinga Web 2"
9
license=('GPL-3.0-or-later')
10
arch=('any')
11
depends=(
12
'icingaweb2'
13
'icinga-php-legacy'
14
)
15
provides=('icingaweb2-module-director')
16
conflicts=('icingaweb2-module-director')
17
url="https://www.icinga.org"
18
install="icingaweb2-module-director.install"
19
source=(
20
"git+https://github.com/Icinga/icingaweb2-module-director.git"
21
"${pkgname%-git}.sysusers"
22
)
23
sha256sums=('SKIP'
24
'311043f4f4da68e5fcf8ad8593475d8287fe2f681e52940b33d41bc681d74cec')
25
26
pkgver() {
27
cd "${pkgname%-git}"
28
git describe --long --tags | sed -e 's/\([^-]*-g\)/r\1/' -e 's/-/./g' -e 's/^v//'
29
}
30
31
package() {
32
cd "${srcdir}/${pkgname%-git}"
33
34
install -dm770 "${pkgdir}/etc/icingaweb2/modules/director"
35
chmod 2770 "${pkgdir}/etc/icingaweb2"
36
mkdir -p "${pkgdir}/usr/share/webapps/icingaweb2/modules/director"
37
38
cp -r * "${pkgdir}/usr/share/webapps/icingaweb2/modules/director"
39
40
install -Dm644 "${srcdir}/${pkgname%-git}.sysusers" "${pkgdir}/usr/lib/sysusers.d/${pkgname%-git}.conf"
41
install -Dm644 "contrib/systemd/icinga-director.service" "${pkgdir}/usr/lib/systemd/system/icinga-director.service"
42
}
43
Changes since previous scan
--- PKGBUILD @ 2026-06-18 16:11+++ PKGBUILD @ 2026-10-05 23:40@@ -1,34 +1,43 @@-# Maintainer: Daniel Bodky <dbodky@gmail.com>+# Maintainer: Martin Rys <https://rys.rs/contact>+# Contributor: Daniel Bodky <dbodky@gmail.com> # Contributor: Malte Rabenseifner <mail@malte-rabenseifner.de> pkgname=icingaweb2-module-director-git-_pkgname=icingaweb2-module-director-pkgver=v1.8.1.r67.087ce05+pkgver=1.12.0.r2.g4554f5be pkgrel=1 pkgdesc="Manage Icinga 2 configuration from Icinga Web 2"-license=('GPL')+license=('GPL-3.0-or-later') arch=('any')-depends=('icingaweb2' 'icingaweb2-module-ipl' 'icingaweb2-module-incubator' 'icingaweb2-module-reactbundle')+depends=(+ 'icingaweb2'+ 'icinga-php-legacy'+) provides=('icingaweb2-module-director') conflicts=('icingaweb2-module-director') url="https://www.icinga.org"-source=("git+https://github.com/Icinga/icingaweb2-module-director.git")-sha256sums=('SKIP')+install="icingaweb2-module-director.install"+source=(+ "git+https://github.com/Icinga/icingaweb2-module-director.git"+ "${pkgname%-git}.sysusers"+)+sha256sums=('SKIP'+ '311043f4f4da68e5fcf8ad8593475d8287fe2f681e52940b33d41bc681d74cec') pkgver() {- cd "$_pkgname"- git describe --long --tags | sed 's/\([^-]*-g\)/r\1/;s/-/./g'+ cd "${pkgname%-git}"+ git describe --long --tags | sed -e 's/\([^-]*-g\)/r\1/' -e 's/-/./g' -e 's/^v//' } package() {- cd "$srcdir/$_pkgname"+ cd "${srcdir}/${pkgname%-git}" - mkdir -p "$pkgdir/etc/icingaweb2/modules/director"- mkdir -p "$pkgdir/usr/share/icingaweb2/modules/director"+ install -dm770 "${pkgdir}/etc/icingaweb2/modules/director"+ chmod 2770 "${pkgdir}/etc/icingaweb2"+ mkdir -p "${pkgdir}/usr/share/webapps/icingaweb2/modules/director" - cp -r application contrib doc library public schema test \- configuration.php module.info register-hooks.php run-missingdeps.php \- run-php5.3.php run.php \- "$pkgdir/usr/share/icingaweb2/modules/director"+ cp -r * "${pkgdir}/usr/share/webapps/icingaweb2/modules/director"++ install -Dm644 "${srcdir}/${pkgname%-git}.sysusers" "${pkgdir}/usr/lib/sysusers.d/${pkgname%-git}.conf"+ install -Dm644 "contrib/systemd/icinga-director.service" "${pkgdir}/usr/lib/systemd/system/icinga-director.service" } Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-05 23:40:58 | Medium | 2 |
| 2026-06-18 16:11:54 | Clean | 0 |