lxc-selinux

maintainer IooNag · 2 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a tarball from the project's official domain (linuxcontainers.org) used for building the software, which is a normal and legitimate practice; the non-whitelisted host is the project's own, so the risk is low despite the static analyzer flag.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (linuxcontainers.org) used for building the software, which is a normal and legitimate practice; the non-whitelisted host is the project's own, so the risk is low despite the static analyzer flag.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:33 source=("https://linuxcontainers.org/downloads/lxc/${pkgname/-selinux}-${pkgver}.tar.gz"{,.asc}

PKGBUILD

1 offending line(s) highlighted
1# Maintainer:
2# Contributor: Felix Golatofski <contact@xdfr.de>
3# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
4# Contributor: Morten Linderud <foxboron@archlinux.org>
5# Contributor: Andrea Zucchelli <zukka77@gmail.com>
6# Contributor: Daniel Micay <danielmicay@gmail.com>
7# Contributor: Jonathan Liu <net147@gmail.com>
8# Contributor: Jon Nordby <jononor@gmail.com>
9# SELinux Maintainer: Nicolas Iooss (nicolas <dot> iooss <at> m4x <dot> org)
10# SELinux Maintainer: Marc Mettke (marc@itmettke.de)
11# Based on the official PKGBUILD (https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/lxc)
12
13pkgname=lxc-selinux
14epoch=1
15pkgver=4.0.9
16pkgrel=1
17pkgdesc="Linux Containers"
18arch=('x86_64')
19url="https://linuxcontainers.org"
20depends=('bash' 'perl' 'libseccomp' 'libcap' 'python' 'rsync' 'wget' 'libselinux')
21provides=("${pkgname/-selinux}=${pkgver}-${pkgrel}")
22conflicts=("${pkgname/-selinux}")
23makedepends=('docbook2x' 'lua' 'python-setuptools')
24optdepends=('dnsmasq: lxc-net.service'
25 'lua'
26 'lua-filesystem: lxc-top'
27 'lua-alt-getopt: lxc-top')
28license=('LGPL')
29options=('emptydirs')
30backup=('etc/lxc/default.conf'
31 'etc/default/lxc')
32validpgpkeys=('602F567663E593BCBD14F338C638974D64792D67')
33source=("https://linuxcontainers.org/downloads/lxc/${pkgname/-selinux}-${pkgver}.tar.gz"{,.asc}
34 "fix-70736.patch::https://github.com/lxc/lxc/commit/86c780115a6ad14673f0b6b057219020b0523014.patch"
35 "lxc.tmpfiles.d"
36 "lxc.service"
37 "lxc-auto.service")
38sha256sums=('1fcf0610e9140eceb4be2334eb537bb9c5a213faea77c793ab3c62b86f37e52b'
39 'SKIP'
40 '05031e6e12768a0928adbf2c745f11a8d9152428e0bf3ea81eee1855f27ca540'
41 '10e4f661872f773bf3122a2f9f2cb13344fea86a4ab72beecb4213be4325c479'
42 'bbe7e0447bc3bf5f75f312c34d647f5218024731628a5e8633b1ea1801ebe16b'
43 'b31f8d6b301ab9901b43f2696bcd0babb32b96e4a59fab63a2d642e43bf26bb3')
44
45prepare() {
46 cd "$srcdir/${pkgname/-selinux}-${pkgver/_/-}"
47 sed -i \
48 -e 's|"\\"-//Davenport//DTD DocBook V3.0//EN\\""|"\\"-//OASIS//DTD DocBook XML\\" \\"https://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd\\""|' \
49 configure.ac
50 # https://bugs.archlinux.org/task/70736
51 # https://github.com/lxc/lxc/pull/3827
52 patch -Np1 < "$srcdir/fix-70736.patch"
53}
54
55build() {
56 cd "$srcdir/${pkgname/-selinux}-${pkgver/_/-}"
57 ./autogen.sh
58 bashcompdir=/usr/share/bash-completion/completions ./configure \
59 --prefix=/usr \
60 --sbindir=/usr/bin \
61 --localstatedir=/var \
62 --libexecdir=/usr/lib \
63 --libdir=/usr/lib \
64 --sysconfdir=/etc \
65 --disable-apparmor \
66 --enable-selinux \
67 --enable-seccomp \
68 --enable-capabilities \
69 --with-init-script=systemd \
70 --with-systemdsystemunitdir=/usr/lib/systemd/system \
71 --enable-pam \
72 --with-pamdir=/usr/lib/security
73 make
74}
75
76package() {
77 cd "$srcdir/${pkgname/-selinux}-${pkgver/_/-}"
78
79 make DESTDIR="$pkgdir" install
80 install -d -m755 "$pkgdir/var/lib/lxc"
81 install -d -m755 "$pkgdir/usr/lib/lxc/rootfs/dev"
82 install -D -m644 "$srcdir"/lxc.service "$pkgdir"/usr/lib/systemd/system/lxc@.service
83 install -D -m644 "$srcdir"/lxc-auto.service "$pkgdir"/usr/lib/systemd/system/lxc-auto.service
84 install -D -m644 "$srcdir"/lxc.tmpfiles.d "$pkgdir"/usr/lib/tmpfiles.d/lxc.conf
85
86 cd doc
87 find . -type f -name '*.1' -exec install -D -m644 "{}" "$pkgdir/usr/share/man/man1/{}" \;
88 find . -type f -name '*.5' -exec install -D -m644 "{}" "$pkgdir/usr/share/man/man5/{}" \;
89 find . -type f -name '*.7' -exec install -D -m644 "{}" "$pkgdir/usr/share/man/man7/{}" \;
90}
91

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion