omada-controller-rxy
LOW
maintainer robertxy
0 votes
scanned 2026-11-06 00:21:40.447623
Why flagged
The package downloads a source tarball from a non-whitelisted host (static.tp-link.com), but this is plausibly TP-Link's official static content domain for Omada controller software; the build installs only project binaries and scripts without executing untrusted remote code or exfiltrating data.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from a non-whitelisted host (static.tp-link.com), but this is plausibly TP-Link's official static content domain for Omada controller software; the build installs only project binaries and scripts without executing untrusted remote code or exfiltrating data.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:19
"https://static.tp-link.com/${_basepkgpath}/${_basepkgname}_v${pkgver}_${_baseos}_${_last_code}.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: robertxy <prfiredragon at gmail dot com>
2
3
pkgname='omada-controller-rxy'
4
pkgver=6.3.0.45
5
pkgrel=1
6
pkgdesc='Omada SDN Controller'
7
_basepkgname='Omada_Network_Application'
8
_basepkgpath='upload/software/2026/202609/20260904'
9
_baseos='linux_x64'
10
_last_code='20260903171900'
11
arch=('x86_64' 'aarch64')
12
url='https://www.tp-link.com/us/support/download/omada-software-controller/#Controller_Software'
13
license=('GPL')
14
depends=('java-runtime=17' 'java-jsvc' 'curl' 'mongodb>=3' 'mongodb<7')
15
makedepends=('git')
16
conflicts=('omada-sdn-controller' 'omada-controller')
17
install=omada-controller.install
18
source=(
19
"https://static.tp-link.com/${_basepkgpath}/${_basepkgname}_v${pkgver}_${_baseos}_${_last_code}.tar.gz"
20
"git+https://github.com/prfiredragon/omada-controller-scripts.git"
21
)
22
sha256sums=('dadf7e187fa2b21892a3f26475ae15360f41d64f578a70f0801d2ae19da9eb6a'
23
'SKIP')
24
25
package() {
26
cd ${_basepkgname}_v${pkgver}_${_baseos}
27
28
# Install required source files.
29
local BASEDIR="${pkgdir}/opt/omada-controller"
30
install -dm 755 "${BASEDIR}"
31
32
# Install JAR libraries.
33
install -dm 755 "${BASEDIR}/lib"
34
35
for file in lib/*; do
36
install -m 644 "${file}" "${BASEDIR}/lib/"
37
done
38
39
# Install binaries.
40
install -dm 755 "${BASEDIR}/bin"
41
42
for file in bin/*; do
43
install -m 755 "${file}" "${BASEDIR}/bin/"
44
done
45
46
# Install *.properties config files.
47
install -dm 755 "${BASEDIR}/properties"
48
49
for file in properties/*; do
50
install -m 644 "${file}" "${BASEDIR}/properties/"
51
done
52
53
ln -sf /usr/bin/mongod "${BASEDIR}/bin/mongod"
54
55
### Install scripts ####
56
57
# Install systemd units.
58
cd "${srcdir}/omada-controller-scripts"
59
install -dm 755 "${pkgdir}/usr/lib/systemd/system"
60
install -m 644 "omada-controller.service" "${pkgdir}/usr/lib/systemd/system/"
61
#systemctl daemon-reload #Not alowed any more
62
63
# Install sysusers configuration.
64
install -dm 755 "${pkgdir}/usr/lib/sysusers.d"
65
install -m 644 "omada-controller.conf" "${pkgdir}/usr/lib/sysusers.d/"
66
67
# Install ALPM hook and script.
68
install -dm 755 "${pkgdir}/usr/share/libalpm/hooks"
69
install -m 644 omada-init-user-dirs.hook "${pkgdir}/usr/share/libalpm/hooks/"
70
install -dm 755 "${pkgdir}/usr/share/libalpm/scripts"
71
install -m 755 omada-init-user-dirs.sh "${pkgdir}/usr/share/libalpm/scripts/omada-init-user-dirs"
72
}
73
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-06 00:21:40 | Low | 2 |
| 2026-11-05 00:01:40 | Low | 2 |
| 2026-11-04 00:25:23 | Low | 2 |
| 2026-11-03 00:01:00 | Low | 2 |
| 2026-11-02 00:26:00 | Low | 2 |
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |