kamailio

LOW

maintainer nikost74 11 votes scanned 2026-10-05 00:08:03.938595

View on AUR

Why flagged

The source URL is hosted on the project's official domain (kamailio.org), which is a standard and trusted host for the software, despite not being on the analyzer's whitelist; the package builds from official source code and performs normal build-time patches and installations.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL is hosted on the project's official domain (kamailio.org), which is a standard and trusted host for the software, despite not being on the analyzer's whitelist; the package builds from official source code and performs normal build-time patches and installations.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:44 source=("https://www.kamailio.org/pub/${pkgname}/latest/src/${pkgname}-${pkgver}_src.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Nikos Toutountzoglou <nikos.toutou@protonmail.com>
    
      2# Contributor: Josef Miegl <josef@miegl.cz>
    
      3# Contributor: Xavier Devlamynck <magicrhesus@ouranos.be>
    
      4
    
      5pkgname=kamailio
    
      6pkgver=6.1.4
    
      7pkgrel=1
    
      8pkgdesc="SIP Server for large VoIP and real-time communication platforms"
    
      9arch=('x86_64')
    
      10url="https://www.kamailio.org"
    
      11license=('GPL-2.0-or-later')
    
      12
    
      13depends=(
    
      14  'bash' 'glibc' 'readline' 'ncurses' 'expat' 'jansson' 'libev'
    
      15)
    
      16
    
      17makedepends=(
    
      18  'cmake' 'gcc' 'make' 'pkg-config' 'flex' 'bison' 'clang'
    
      19  'openssl' 'libmariadbclient' 'postgresql-libs' 'sqlite'
    
      20  'python' 'lua' 'libxml2' 'curl' 'libunistring' 'util-linux'
    
      21  'lynx' 'libxslt' 'docbook2x' 'docbook-xsl' 'lksctp-tools'
    
      22)
    
      23
    
      24optdepends=(
    
      25  'mariadb-libs: MySQL/MariaDB database support'
    
      26  'postgresql-libs: PostgreSQL database support'
    
      27  'sqlite: SQLite database support'
    
      28  'python: Python 3 KEMI scripting support'
    
      29  'lua: Lua KEMI scripting support'
    
      30  'curl: HTTP client support'
    
      31  'libxml2: XML operations'
    
      32  'unixodbc: ODBC database support'
    
      33  'lksctp-tools: SCTP transport support'
    
      34)
    
      35
    
      36backup=(
    
      37  'etc/kamailio/kamailio.cfg'
    
      38  'etc/kamailio/kamctlrc'
    
      39  'etc/kamailio/tls.cfg'
    
      40)
    
      41
    
      42install="${pkgname}.install"
    
      43
    
      44source=("https://www.kamailio.org/pub/${pkgname}/latest/src/${pkgname}-${pkgver}_src.tar.gz"
    
      45        "${pkgname}.sysusers"
    
      46        "${pkgname}.tmpfiles")
    
      47sha256sums=('290624b6624edc230af0fc458fb7e481e64b893be7cb5084398e587942992e0a'
    
      48            'cbc0d7510a52791cb2016d91df9543433f3b8467efec196ed06d025ba5f8a0fa'
    
      49            'edcbe39e6c5c368109e791693302dfc41c1b63f654eb6311281a8bdfc4adfbf3')
    
      50
    
      51prepare() {
    
      52  cd "${srcdir}/${pkgname}-${pkgver}"
    
      53
    
      54  # Patch helper scripts in source to look in /usr/bin
    
      55  find utils/kamctl/ -type f -exec sed -i 's|/usr/sbin|/usr/bin|g' {} +
    
      56
    
      57  # Patch systemd service
    
      58  if [ -f "pkg/${pkgname}/obs/${pkgname}.service" ]; then
    
      59    sed -i \
    
      60      -e "s#ExecStart=/usr/sbin/${pkgname}#ExecStart=/usr/bin/${pkgname}#g" \
    
      61      -e "s#EnvironmentFile=-/etc/sysconfig/${pkgname}#EnvironmentFile=-/etc/default/${pkgname}#g" \
    
      62      "pkg/${pkgname}/obs/${pkgname}.service"
    
      63  fi
    
      64}
    
      65
    
      66build() {
    
      67  cd "${srcdir}/${pkgname}-${pkgver}"
    
      68
    
      69  local modules='acc;alias_db;async;auth;auth_db;avpops;benchmark;blst;cfg_rpc;cfgutils;corex;counters;ctl;debugger;dialog;dialplan;dispatcher;dmq;domain;domainpolicy;drouting;enum;exec;group;htable;ipops;jansson;jsonrpcs;kex;lcr;maxfwd;mqueue;nathelper;path;pdt;permissions;pike;pipelimit;prefix_route;pv;ratelimit;regex;registrar;rls;rr;rtimer;sanity;sca;sdpops;siputils;sl;speeddial;sqlops;statistics;textops;tm;tmx;topoh;uac;usrloc;xlog;db_mysql;db_postgres;db_sqlite;tls;websocket;sctp;app_python3;app_lua'
    
      70
    
      71  local cmake_options=(
    
      72    -B build
    
      73    -S .
    
      74    -Wno-dev
    
      75    -DCMAKE_BUILD_TYPE=None
    
      76    -DINCLUDE_MODULES="${modules}"
    
      77    -DCMAKE_INSTALL_PREFIX=/usr
    
      78    -DCMAKE_INSTALL_LIBDIR=/usr/lib
    
      79    -DCMAKE_INSTALL_BINDIR=/usr/bin
    
      80    -DCMAKE_INSTALL_SBINDIR=/usr/bin
    
      81    -DCMAKE_INSTALL_SYSCONFDIR=/etc
    
      82    -DCMAKE_INSTALL_DOCDIR=/usr/share/doc/kamailio
    
      83    -DCMAKE_INSTALL_MANDIR=/usr/share/man
    
      84    -DBUILD_DOC=ON
    
      85    -DLYNX_EXECUTABLE=/usr/bin/lynx
    
      86    -DXSLTPROC_EXECUTABLE=/usr/bin/xsltproc
    
      87    -DDOCBOOK2X_EXECUTABLE=/usr/bin/docbook2x-man
    
      88    -DUSE_TCP=ON
    
      89    -DUSE_TLS=ON
    
      90    -DUSE_SCTP=ON
    
      91    -DCMAKE_EXE_LINKER_FLAGS="${LDFLAGS}"
    
      92    -DCMAKE_SHARED_LINKER_FLAGS="${LDFLAGS}"
    
      93  )
    
      94
    
      95  # Configure and build
    
      96  cmake "${cmake_options[@]}"
    
      97  cmake --build build
    
      98}
    
      99
    
      100package() {
    
      101  cd "${srcdir}/${pkgname}-${pkgver}"
    
      102  
    
      103  DESTDIR="${pkgdir}" cmake --install build
    
      104
    
      105  # Enforce Arch Linux standard (Binaries in /usr/bin)
    
      106  if [ -d "${pkgdir}/usr/sbin" ]; then
    
      107    mv "${pkgdir}/usr/sbin/"* "${pkgdir}/usr/bin/"
    
      108    rmdir "${pkgdir}/usr/sbin"
    
      109  fi
    
      110
    
      111  # Sanitize Config Paths (/usr/local -> /etc or /usr)
    
      112  find "${pkgdir}/etc/kamailio" -name "*.cfg" -type f -exec sed -i 's|/usr/local/etc|/etc|g' {} +
    
      113  find "${pkgdir}/etc/kamailio" -name "*.cfg" -type f -exec sed -i 's|/usr/local/lib|/usr/lib|g' {} +
    
      114
    
      115  # Fix kamctlrc specifically
    
      116  if [ -f "${pkgdir}/etc/kamailio/kamctlrc" ]; then
    
      117    sed -i "s|${srcdir}/${pkgname}-${pkgver}||g" "${pkgdir}/etc/kamailio/kamctlrc"
    
      118    sed -i 's|/usr/sbin|/usr/bin|g' "${pkgdir}/etc/kamailio/kamctlrc"
    
      119    sed -i 's|/usr/local|/usr|g' "${pkgdir}/etc/kamailio/kamctlrc"
    
      120  fi
    
      121
    
      122  # Clean executable scripts in /usr/bin
    
      123  for file in kamctl kamdbctl; do
    
      124    if [ -f "${pkgdir}/usr/bin/${file}" ]; then
    
      125      sed -i "s|${srcdir}/${pkgname}-${pkgver}||g" "${pkgdir}/usr/bin/${file}"
    
      126      sed -i "s|${srcdir}||g" "${pkgdir}/usr/bin/${file}"
    
      127      sed -i 's|/usr/sbin|/usr/bin|g' "${pkgdir}/usr/bin/${file}"
    
      128    fi
    
      129  done
    
      130
    
      131  # Standard Cleanup & System Integration
    
      132  find "${pkgdir}/usr/share/man" -type d -empty -delete
    
      133
    
      134  install -Dm644 "COPYING" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      135
    
      136  install -Dm644 "pkg/${pkgname}/obs/${pkgname}.service" \
    
      137    "${pkgdir}/usr/lib/systemd/system/${pkgname}.service"
    
      138
    
      139  install -Dm644 "${srcdir}/${pkgname}.sysusers" \
    
      140    "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
    
      141
    
      142  install -Dm644 "${srcdir}/${pkgname}.tmpfiles" \
    
      143    "${pkgdir}/usr/lib/tmpfiles.d/${pkgname}.conf"
    
      144}
    
      145
    
      146# vim:set ts=2 sw=2 et:
    
      147

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2
2026-09-18 00:17:11	Low	2
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2