lxc-selinux
maintainer IooNag
· 2 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source is a tarball from the project's official domain (linuxcontainers.org) used for building the software, which is a normal and legitimate practice; the non-whitelisted host is the project's own, so the risk is low despite the static analyzer flag.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (linuxcontainers.org) used for building the software, which is a normal and legitimate practice; the non-whitelisted host is the project's own, so the risk is low despite the static analyzer flag.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:33
source=("https://linuxcontainers.org/downloads/lxc/${pkgname/-selinux}-${pkgver}.tar.gz"{,.asc}
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer:
2
# Contributor: Felix Golatofski <contact@xdfr.de>
3
# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
4
# Contributor: Morten Linderud <foxboron@archlinux.org>
5
# Contributor: Andrea Zucchelli <zukka77@gmail.com>
6
# Contributor: Daniel Micay <danielmicay@gmail.com>
7
# Contributor: Jonathan Liu <net147@gmail.com>
8
# Contributor: Jon Nordby <jononor@gmail.com>
9
# SELinux Maintainer: Nicolas Iooss (nicolas <dot> iooss <at> m4x <dot> org)
10
# SELinux Maintainer: Marc Mettke (marc@itmettke.de)
11
# Based on the official PKGBUILD (https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/lxc)
12
13
pkgname=lxc-selinux
14
epoch=1
15
pkgver=4.0.9
16
pkgrel=1
17
pkgdesc="Linux Containers"
18
arch=('x86_64')
19
url="https://linuxcontainers.org"
20
depends=('bash' 'perl' 'libseccomp' 'libcap' 'python' 'rsync' 'wget' 'libselinux')
21
provides=("${pkgname/-selinux}=${pkgver}-${pkgrel}")
22
conflicts=("${pkgname/-selinux}")
23
makedepends=('docbook2x' 'lua' 'python-setuptools')
24
optdepends=('dnsmasq: lxc-net.service'
25
'lua'
26
'lua-filesystem: lxc-top'
27
'lua-alt-getopt: lxc-top')
28
license=('LGPL')
29
options=('emptydirs')
30
backup=('etc/lxc/default.conf'
31
'etc/default/lxc')
32
validpgpkeys=('602F567663E593BCBD14F338C638974D64792D67')
33
source=("https://linuxcontainers.org/downloads/lxc/${pkgname/-selinux}-${pkgver}.tar.gz"{,.asc}
34
"fix-70736.patch::https://github.com/lxc/lxc/commit/86c780115a6ad14673f0b6b057219020b0523014.patch"
35
"lxc.tmpfiles.d"
36
"lxc.service"
37
"lxc-auto.service")
38
sha256sums=('1fcf0610e9140eceb4be2334eb537bb9c5a213faea77c793ab3c62b86f37e52b'
39
'SKIP'
40
'05031e6e12768a0928adbf2c745f11a8d9152428e0bf3ea81eee1855f27ca540'
41
'10e4f661872f773bf3122a2f9f2cb13344fea86a4ab72beecb4213be4325c479'
42
'bbe7e0447bc3bf5f75f312c34d647f5218024731628a5e8633b1ea1801ebe16b'
43
'b31f8d6b301ab9901b43f2696bcd0babb32b96e4a59fab63a2d642e43bf26bb3')
44
45
prepare() {
46
cd "$srcdir/${pkgname/-selinux}-${pkgver/_/-}"
47
sed -i \
48
-e 's|"\\"-//Davenport//DTD DocBook V3.0//EN\\""|"\\"-//OASIS//DTD DocBook XML\\" \\"https://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd\\""|' \
49
configure.ac
50
# https://bugs.archlinux.org/task/70736
51
# https://github.com/lxc/lxc/pull/3827
52
patch -Np1 < "$srcdir/fix-70736.patch"
53
}
54
55
build() {
56
cd "$srcdir/${pkgname/-selinux}-${pkgver/_/-}"
57
./autogen.sh
58
bashcompdir=/usr/share/bash-completion/completions ./configure \
59
--prefix=/usr \
60
--sbindir=/usr/bin \
61
--localstatedir=/var \
62
--libexecdir=/usr/lib \
63
--libdir=/usr/lib \
64
--sysconfdir=/etc \
65
--disable-apparmor \
66
--enable-selinux \
67
--enable-seccomp \
68
--enable-capabilities \
69
--with-init-script=systemd \
70
--with-systemdsystemunitdir=/usr/lib/systemd/system \
71
--enable-pam \
72
--with-pamdir=/usr/lib/security
73
make
74
}
75
76
package() {
77
cd "$srcdir/${pkgname/-selinux}-${pkgver/_/-}"
78
79
make DESTDIR="$pkgdir" install
80
install -d -m755 "$pkgdir/var/lib/lxc"
81
install -d -m755 "$pkgdir/usr/lib/lxc/rootfs/dev"
82
install -D -m644 "$srcdir"/lxc.service "$pkgdir"/usr/lib/systemd/system/lxc@.service
83
install -D -m644 "$srcdir"/lxc-auto.service "$pkgdir"/usr/lib/systemd/system/lxc-auto.service
84
install -D -m644 "$srcdir"/lxc.tmpfiles.d "$pkgdir"/usr/lib/tmpfiles.d/lxc.conf
85
86
cd doc
87
find . -type f -name '*.1' -exec install -D -m644 "{}" "$pkgdir/usr/share/man/man1/{}" \;
88
find . -type f -name '*.5' -exec install -D -m644 "{}" "$pkgdir/usr/share/man/man5/{}" \;
89
find . -type f -name '*.7' -exec install -D -m644 "{}" "$pkgdir/usr/share/man/man7/{}" \;
90
}
91
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |