open-vm-tools-wayland

maintainer dsoyet · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The setuid chmod 7755 on vmware-user-suid-wrapper is standard for open-vm-tools packaging (the official AUR open-vm-tools package does the same), not a novel privilege escalation; the source is built from the official VMware GitHub repo with local patches, and no unverified remote executables are downloaded or executed.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 80%): The setuid chmod 7755 on vmware-user-suid-wrapper is standard for open-vm-tools packaging (the official AUR open-vm-tools package does the same), not a novel privilege escalation; the source is built from the official VMware GitHub repo with local patches, and no unverified remote executables are downloaded or executed.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

PKGBUILD:71 chmod 7755 "${pkgdir}"/usr/bin/vmware-user-suid-wrapper

PKGBUILD

1 offending line(s) highlighted

      1_pkgbase=open-vm-tools
    
      2pkgname=open-vm-tools-wayland
    
      3# Maintainer: Lattice Sum <dsoyet@outlook.com>
    
      4conflicts=('open-vm-tools' 'open-vm-tools-clipway')
    
      5provides=('open-vm-tools')
    
      6epoch=6
    
      7pkgver=13.1.0
    
      8pkgrel=3
    
      9pkgdesc='open-vm-tools with Wayland clipboard support via clipway patch'
    
      10arch=('x86_64')
    
      11url='https://github.com/vmware/open-vm-tools'
    
      12license=('LGPL-2.1-only')
    
      13depends=('fuse3' 'icu' 'iproute2' 'libdnet' 'libmspack' 'libsigc++'
    
      14         'libxcrypt' 'libcrypt.so' 'libxss' 'lsb-release' 'procps-ng'
    
      15         'uriparser' 'which' 'xmlsec' 'wl-clipboard')
    
      16makedepends=('git' 'chrpath' 'doxygen' 'gtkmm3' 'libxtst' 'python' 'rpcsvc-proto' 'glib2-devel')
    
      17checkdepends=('cunit')
    
      18optdepends=('gtkmm3: DnD/CP plugin'
    
      19            'libxtst: DnD/CP, resolution set plugins'
    
      20            'netctl: suspend-resume network state'
    
      21            'networkmanager: suspend-resume network state')
    
      22backup=('etc/pam.d/vmtoolsd'
    
      23        'etc/vmware-tools/vgauth.conf'
    
      24        'etc/xdg/autostart/vmware-user.desktop')
    
      25options=('docs')
    
      26source=("git+https://github.com/vmware/open-vm-tools#tag=stable-${pkgver}"
    
      27        'vmtoolsd.pam'
    
      28        'vmtoolsd.service'
    
      29        'vmware-vmblock-fuse.service'
    
      30        clipway.patch
    
      31        desktopEvents-wayland.patch
    
      32        open-vm-tools-gcc16.patch)
    
      33sha256sums=('916a09225a22653ec5e56b1df5bbfacc7f69b2b9e8ac734052936bcb75cde49a'
    
      34            '9848f4b621bb1134e463fea099f03933cf3f48f1ac5e580228abef264d26137e'
    
      35            '0626cc86232f75a7286c24c52d6b44260bba55e2e96c17fa22ed36decb61a4d9'
    
      36            '99e3cc1da20a751049144cc02dec77174a55109b5b5960e1facd78709da7724f'
    
      37            '0e7d333bfdf9ebb903d40ec4e8b9fe16c75e34d17f9e67cf22646992574a4d77'
    
      38            '15f26a57d81ec482ef657ea665d72664e70332e9f5b33e3aa495c6f9f86620b7'
    
      39            '2c3b3fa378c86307223b9977c6b07ec1781d5b396c1526ee7fef73b7604a0c6d')
    
      40
    
      41prepare() {
    
      42  cd "${srcdir}/${_pkgbase}/open-vm-tools/"
    
      43  patch -Np1 -i ../../open-vm-tools-gcc16.patch
    
      44  patch -Np1 -i ../../clipway.patch
    
      45  patch -Np1 -i ../../desktopEvents-wayland.patch
    
      46  autoreconf -vi
    
      47}
    
      48
    
      49build() {
    
      50  cd "${srcdir}/${_pkgbase}/open-vm-tools/"
    
      51
    
      52  sh ./configure \
    
      53    --prefix=/usr \
    
      54    --sbindir=/usr/bin \
    
      55    --sysconfdir=/etc \
    
      56    --with-udev-rules-dir=/usr/lib/udev/rules.d \
    
      57    --without-kernel-modules
    
      58  make
    
      59}
    
      60
    
      61check() {
    
      62  cd "${srcdir}/${_pkgbase}/open-vm-tools/"
    
      63
    
      64  make check
    
      65}
    
      66
    
      67package() {
    
      68  cd "${srcdir}/${_pkgbase}/open-vm-tools/"
    
      69
    
      70  make install DESTDIR="${pkgdir}"
    
      71  chmod 7755 "${pkgdir}"/usr/bin/vmware-user-suid-wrapper
    
      72
    
      73  # install vmware-xdg-detect-de
    
      74  install -D -m0755 scripts/common/vmware-xdg-detect-de "${pkgdir}"/usr/bin/vmware-xdg-detect-de
    
      75
    
      76  # install pam configuration
    
      77  install -D -m0644 "${srcdir}"/vmtoolsd.pam "${pkgdir}"/etc/pam.d/vmtoolsd
    
      78
    
      79  # install systemd files
    
      80  install -D -m0644 "${srcdir}"/vmtoolsd.service "${pkgdir}"/usr/lib/systemd/system/vmtoolsd.service
    
      81  install -D -m0644 "${srcdir}"/vmware-vmblock-fuse.service "${pkgdir}"/usr/lib/systemd/system/vmware-vmblock-fuse.service
    
      82}
    
      83

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	3
2026-08-01 00:11:18	LOW	3
2026-07-31 00:14:10	LOW	3
2026-07-30 00:17:23	LOW	3
2026-07-29 00:25:53	LOW	3
2026-07-28 00:07:28	LOW	3
2026-07-27 00:24:32	LOW	3
2026-07-26 00:07:32	LOW	3
2026-07-25 00:13:44	LOW	3
2026-07-24 00:02:28	LOW	3
2026-07-23 00:14:47	LOW	3
2026-07-22 00:29:32	LOW	3
2026-07-21 00:24:15	LOW	3
2026-07-20 00:19:49	LOW	3
2026-07-19 07:12:01	LOW	3
2026-07-19 07:10:24	MEDIUM	2