netatop-dkms

maintainer bartus · 14 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads the source tarball from the project's official domain (atoptool.nl), which is not on the standard whitelist but is plausibly legitimate; the build process compiles the module from source and installs it via DKMS, which is normal for kernel modules.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the source tarball from the project's official domain (atoptool.nl), which is not on the standard whitelist but is plausibly legitimate; the build process compiles the module from source and installs it via DKMS, which is normal for kernel modules.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 source=("http://atoptool.nl/download/netatop-${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: m1kc <m1kc@yandex.ru>
2# Contributor: Spider.007 <archPackage@spider007.net>
3pkgname=netatop-dkms
4_pkgname=netatop
5pkgver=3.2.2
6pkgrel=2
7pkgdesc="Atop network kernel module, enables network statistics in atop"
8url="http://www.atoptool.nl/"
9groups=('modules')
10license=('GPL')
11depends=('atop' 'dkms' 'bash' 'zlib')
12conflicts=('netatop')
13makedepends=()
14source=("http://atoptool.nl/download/netatop-${pkgver}.tar.gz"
15 netatop_kernel_6.15.patch
16 "netatop-dkms.conf"
17 "netatop-dkms.install")
18install="netatop-dkms.install"
19sha256sums=('508a8977cd3d1cdd67587a13c25e3a414647b48f92d1ce38fc138b5914aea3f6'
20 'e63b02601617756652ca22405713e911f029024446d28f00f6571cac18eecbc8'
21 '56e9094e396fcdabadde4db8a9f21945484e4db93359dc22f2fb76436b1b2ea9'
22 '0cda5de65ab96445951e39decfc18b50aad90245f661eb58438ac402cd2496b7')
23arch=('x86_64' 'i686')
24
25prepare() {
26 true
27 patch -d "${srcdir}/${_pkgname}-${pkgver}" -Np1 -i "${srcdir}"/netatop_kernel_6.15.patch
28}
29
30build() {
31 warning "-------------------------------------------------------------------"
32 warning "Package build will fail if there are no headers for currently"
33 warning "loaded kernel or their versions mismatch (for example, you have"
34 warning "updated the kernel but did not reboot yet)."
35 warning "-------------------------------------------------------------------"
36
37 cd $srcdir/$_pkgname-$pkgver
38 # build daemon, make sure that module can be built
39 make all
40 # remove these objects again, they'll be rebuilt by DKMS
41 find -name '*.o' -exec rm -v '{}' ';'
42 find -name '*.ko' -exec rm -v '{}' ';'
43 find -name 'modules.order' -exec rm -v '{}' ';'
44 find -name 'netatop.mod' -exec rm -v '{}' ';'
45}
46
47package() {
48 cd $srcdir/$_pkgname-$pkgver
49
50# if [[ `uname -r` =~ ^([0-9]\.[0-9]+)\.[0-9]+-[0-9]+(-.*)$ ]]
51# then
52# install -Dm 0744 module/netatop.ko $pkgdir/usr/lib/modules/extramodules-${BASH_REMATCH[1]}${BASH_REMATCH[2]}/netatop.ko
53# else
54# echo "Could not parse version `uname -r`; please report" >&2
55# exit 1
56# fi
57
58 # copy module sources
59 cd $srcdir/$_pkgname-$pkgver
60 mkdir -p ${pkgdir}/usr/src/${_pkgname}-${pkgver}
61 cp -RL * ${pkgdir}/usr/src/${_pkgname}-${pkgver}
62 # copy dkms.conf
63 sed -i "s|PACKAGE_VERSION=\"0.5\"|PACKAGE_VERSION=\"${pkgver}\"|g" "${srcdir}/netatop-dkms.conf"
64 install -D -m 644 "${srcdir}/netatop-dkms.conf" "${pkgdir}/usr/src/${_pkgname}-${pkgver}/dkms.conf"
65
66 # package remaining stuff
67 cd $srcdir/$_pkgname-$pkgver
68 install -D netatopd $pkgdir/usr/bin/netatopd
69 install -D man/netatop.4 $pkgdir/usr/share/man/man4/netatop.4
70 install -D man/netatopd.8 $pkgdir/usr/share/man/man8/netatopd.8
71 install -D netatop.service $pkgdir/usr/lib/systemd/system/netatop.service
72
73 # auto-load
74 mkdir -p $pkgdir/etc/modules-load.d
75 echo "netatop" > $pkgdir/etc/modules-load.d/netatop.conf
76
77 warning "-------------------------------------------------------------------"
78 warning "After install, DKMS will try to build the netatop module"
79 warning "against every kernel you have installed. For the build to succeed,"
80 warning "you must have header packages for every kernel. Header package"
81 warning "for the stock kernel is called 'linux-headers', other usually"
82 warning "follow the same naming scheme."
83 warning "-------------------------------------------------------------------"
84}
85

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion