openafs

maintainer Bevan · 62 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source URLs point to the official openafs.org domain, which is the legitimate project host; downloading source tarballs from the project's own domain for building is standard and safe practice, even if not on a whitelist.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URLs point to the official openafs.org domain, which is the legitimate project host; downloading source tarballs from the project's own domain for building is standard and safe practice, even if not on a whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:26 source=(http://openafs.org/dl/openafs/${pkgver}/${pkgname}-${pkgver}-src.tar.bz2

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Michael Lass <bevan@bi-co.net>
    
      2# Contributor: Szymon Jakubczak <szym-at-mit-dot-edu>
    
      3
    
      4# This PKGBUILD is maintained on github:
    
      5# https://github.com/michaellass/AUR
    
      6
    
      7pkgname=openafs
    
      8pkgver=1.8.16.1
    
      9pkgrel=1
    
      10pkgdesc="Open source implementation of the AFS distributed file system"
    
      11arch=('i686' 'x86_64' 'armv7h')
    
      12url="http://www.openafs.org"
    
      13license=(IPL-1.0)
    
      14depends=('bash' 'glibc' 'krb5' 'libxcrypt')
    
      15makedepends=('ncurses')
    
      16optdepends=('openafs-modules: Kernel module for OpenAFS'
    
      17            'openafs-modules-dkms: Kernel module for OpenAFS, built automatically using dkms'
    
      18            'ncurses: Required for scout and afsmonitor')
    
      19conflicts=('openafs-features')
    
      20backup=(etc/conf.d/openafs
    
      21	etc/openafs/ThisCell
    
      22        etc/openafs/cacheinfo
    
      23        etc/openafs/CellServDB)
    
      24options=(!emptydirs)
    
      25install=openafs.install
    
      26source=(http://openafs.org/dl/openafs/${pkgver}/${pkgname}-${pkgver}-src.tar.bz2
    
      27        http://openafs.org/dl/openafs/${pkgver}/${pkgname}-${pkgver}-doc.tar.bz2
    
      28        tmpfiles.d-openafs.conf
    
      29        0001-Adjust-RedHat-config-and-service-files.patch)
    
      30sha256sums=('cf59067589a295471e3f10f644f0f2165113347cc8b0ad0fbb4123259a2af0a2'
    
      31            '91984aa6e175544642e1ddb3d7444ec226eae7ba134d37c05df10fbb808d9e30'
    
      32            '18d7b0173bbffbdc212f4e58c5b3ce369adf868452aabc3485f2a6a2ddb35d68'
    
      33            '941d4a3c7a06be7819e7fb7408fddda5c405cadb8017747dce2d9e86b0da29cc')
    
      34
    
      35# If you need the kauth tools set this to 1. But be aware that these tools
    
      36# are considered insecure since 2003! This also affects the PAM libs.
    
      37ENABLE_KAUTH=0
    
      38
    
      39prepare() {
    
      40  cd "${srcdir}/${pkgname}-${pkgver}"
    
      41
    
      42  # Adjust RedHat config and service files to our needs
    
      43  patch -p1 < "${srcdir}"/0001-Adjust-RedHat-config-and-service-files.patch
    
      44
    
      45  # Only needed when changes to configure were made
    
      46  #./regen.sh -q
    
      47}
    
      48
    
      49build() {
    
      50  cd "${srcdir}/${pkgname}-${pkgver}"
    
      51
    
      52  case "$CARCH" in
    
      53    "i686")    sysname=i386_linux26 ;;
    
      54    "x86_64")  sysname=amd64_linux26 ;;
    
      55    "armv7h")  sysname=arm_linux26 ;;
    
      56    *)         error "Unknown architecture '$CARCH'" && false
    
      57  esac
    
      58
    
      59  if [ $ENABLE_KAUTH -eq 1 ]; then
    
      60    kauth="enable-kauth"
    
      61  else
    
      62    kauth="disable-kauth"
    
      63  fi
    
      64
    
      65  ./configure --prefix=/usr \
    
      66              --sysconfdir=/etc \
    
      67              --sbindir=/usr/bin \
    
      68              --libexecdir=/usr/lib \
    
      69              --disable-fuse-client \
    
      70              --disable-kernel-module \
    
      71              --without-swig \
    
      72              --with-afs-sysname=$sysname \
    
      73              --$kauth
    
      74
    
      75  make all_nolibafs
    
      76}
    
      77
    
      78
    
      79package() {
    
      80  cd "${srcdir}/${pkgname}-${pkgver}"
    
      81
    
      82  make DESTDIR="${pkgdir}" install_nolibafs
    
      83
    
      84  # install systemd service files
    
      85  install -Dm644 "${srcdir}/${pkgname}-${pkgver}/src/packaging/RedHat/openafs-client.service" "${pkgdir}/usr/lib/systemd/system/openafs-client.service"
    
      86  install -Dm644 "${srcdir}/${pkgname}-${pkgver}/src/packaging/RedHat/openafs-server.service" "${pkgdir}/usr/lib/systemd/system/openafs-server.service"
    
      87  install -Dm755 "${srcdir}/${pkgname}-${pkgver}/src/packaging/RedHat/openafs-client-systemd-helper.sh" "${pkgdir}/usr/lib/openafs/openafs-client-systemd-helper.sh"
    
      88
    
      89  # install default configs
    
      90  install -Dm644 "${srcdir}/${pkgname}-${pkgver}/src/afsd/CellServDB" "${pkgdir}/etc/${pkgname}/CellServDB"
    
      91  install -Dm644 "${srcdir}/${pkgname}-${pkgver}/src/packaging/RedHat/openafs.sysconfig" "${pkgdir}/etc/conf.d/openafs"
    
      92  install -Dm644 "${srcdir}/${pkgname}-${pkgver}/src/packaging/RedHat/openafs-ThisCell" "${pkgdir}/etc/${pkgname}/ThisCell"
    
      93  install -Dm644 "${srcdir}/${pkgname}-${pkgver}/src/packaging/RedHat/openafs-cacheinfo" "${pkgdir}/etc/${pkgname}/cacheinfo"
    
      94
    
      95  # install license
    
      96  install -Dm644 "${srcdir}/${pkgname}-${pkgver}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      97
    
      98  # install tmpfiles.d entry for /afs
    
      99  install -Dm644 "${srcdir}/tmpfiles.d-openafs.conf" "${pkgdir}/usr/lib/tmpfiles.d/openafs.conf"
    
      100
    
      101  # rename backup which is a script installed as part of tar
    
      102  mv "${pkgdir}/usr/bin/backup" "${pkgdir}/usr/bin/backup-openafs"
    
      103  mv "${pkgdir}/usr/share/man/man8/backup.8" "${pkgdir}/usr/share/man/man8/backup-openafs.8"
    
      104
    
      105  # if kauth was installed rename kpasswd which is already provided by krb5 and move PAM libs
    
      106  if [ $ENABLE_KAUTH -eq 1 ]; then
    
      107    install -dm755 "${pkgdir}/usr/lib/security"
    
      108    mv "${pkgdir}/usr/lib/pam_afs.krb.so" "${pkgdir}/usr/lib/pam_afs.so" "${pkgdir}/usr/lib/security/"
    
      109    mv "${pkgdir}/usr/bin/kpasswd" "${pkgdir}/usr/bin/kpasswd-openafs"
    
      110    mv "${pkgdir}/usr/share/man/man1/kpasswd.1" "${pkgdir}/usr/share/man/man1/kpasswd-openafs.1"
    
      111  fi
    
      112}
    
      113

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2