openafs-modules
LOW
maintainer Bevan
10 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is downloaded from openafs.org, the official project domain, which is trustworthy; building kernel modules from official project sources is normal AUR packaging and not inherently dangerous.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is downloaded from openafs.org, the official project domain, which is trustworthy; building kernel modules from official project sources is normal AUR packaging and not inherently dangerous.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:19
source=(http://openafs.org/dl/openafs/${pkgver}/${_srcname}-${pkgver}-src.tar.bz2
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Michael Lass <bevan@bi-co.net>
2
3
# This PKGBUILD is maintained on github:
4
# https://github.com/michaellass/AUR
5
6
pkgname=openafs-modules
7
_srcname=openafs
8
pkgver=1.8.16.1
9
pkgrel=2
10
pkgdesc="Kernel module for OpenAFS"
11
arch=('i686' 'x86_64' 'armv7h')
12
url="http://www.openafs.org"
13
license=(IPL-1.0)
14
depends=('openafs')
15
makedepends=('libelf' 'linux-headers' 'openafs>=1.8.12.1-2')
16
conflicts=('openafs-features-libafs' 'openafs<1.6.6-2')
17
options=(!emptydirs)
18
install=openafs-modules.install
19
source=(http://openafs.org/dl/openafs/${pkgver}/${_srcname}-${pkgver}-src.tar.bz2
20
0001-cf-Ensure-BTF-info-is-created-in-tests-for-Linux.patch
21
0002-linux-replace-strncpy-with-strscpy.patch)
22
sha256sums=('cf59067589a295471e3f10f644f0f2165113347cc8b0ad0fbb4123259a2af0a2'
23
'cce37a4d4da631d3e58d547268e1663640d820c69e3b652d9691b44bcbcbb37b'
24
'655b91807f6eefe28a6e7fe101baf337d5cc6cd5e6a7eb714ce638920a413fa2')
25
26
# Heuristic to determine version of installed kernel
27
# You can modify this if the heuristic fails
28
if uname -r | grep -q lts; then
29
# if you are currently running an lts kernel, only consider lts versions
30
_kernelver=$(ls -dt /usr/lib/modules/*lts* | head -n1 | cut -d/ -f5)
31
else
32
_kernelver=$(ls -dt /usr/lib/modules/* | head -n1 | cut -d/ -f5)
33
fi
34
_extramodules="/usr/lib/modules/${_kernelver}/extramodules"
35
36
prepare() {
37
cd "${srcdir}/${_srcname}-${pkgver}"
38
39
# Fix configure checks on Arch Linux
40
patch -p1 < "${srcdir}"/0001-cf-Ensure-BTF-info-is-created-in-tests-for-Linux.patch
41
42
# Add patch for Linux 7.2
43
patch -p1 < "${srcdir}"/0002-linux-replace-strncpy-with-strscpy.patch
44
45
# Only needed when changes to configure were made
46
./regen.sh -q
47
}
48
49
build() {
50
cd "${srcdir}/${_srcname}-${pkgver}"
51
52
echo "Building against kernel ${_kernelver}"
53
54
./configure --prefix=/usr \
55
--sysconfdir=/etc \
56
--sbindir=/usr/bin \
57
--libexecdir=/usr/lib \
58
--disable-fuse-client \
59
--without-swig \
60
--with-linux-kernel-packaging \
61
--with-linux-kernel-headers="/usr/lib/modules/${_kernelver}/build"
62
63
make only_libafs
64
}
65
66
67
package() {
68
cd "${srcdir}/${_srcname}-${pkgver}"
69
70
make DESTDIR="${pkgdir}" install_only_libafs
71
72
# install kernel module
73
install -dm755 "${pkgdir}${_extramodules}"
74
mv "${pkgdir}/lib/modules/${_kernelver}/extra/openafs/openafs.ko" "${pkgdir}${_extramodules}/openafs.ko"
75
gzip -9 "${pkgdir}${_extramodules}/openafs.ko"
76
77
# install license
78
install -Dm644 "${srcdir}/${_srcname}-${pkgver}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
79
80
# remove files already included in openafs package
81
find "${pkgdir}/usr" -maxdepth 3 -type f -delete
82
find "${pkgdir}/usr" -maxdepth 3 -type l -delete
83
84
# update major kernel version in install file
85
sed -i "s/depmod .*/depmod ${_kernelver}/g" "${startdir}/openafs-modules.install"
86
}
87
Changes since previous scan
--- PKGBUILD @ 2026-09-02 00:02+++ PKGBUILD @ 2026-09-17 00:27@@ -6,7 +6,7 @@ pkgname=openafs-modules _srcname=openafs pkgver=1.8.16.1-pkgrel=1+pkgrel=2 pkgdesc="Kernel module for OpenAFS" arch=('i686' 'x86_64' 'armv7h') url="http://www.openafs.org"@@ -17,9 +17,11 @@ options=(!emptydirs) install=openafs-modules.install source=(http://openafs.org/dl/openafs/${pkgver}/${_srcname}-${pkgver}-src.tar.bz2- 0001-cf-Ensure-BTF-info-is-created-in-tests-for-Linux.patch)+ 0001-cf-Ensure-BTF-info-is-created-in-tests-for-Linux.patch+ 0002-linux-replace-strncpy-with-strscpy.patch) sha256sums=('cf59067589a295471e3f10f644f0f2165113347cc8b0ad0fbb4123259a2af0a2'- 'bcd276a3e41d5c5a7eb437718c4143b63ac36ed851df9db091653754d4b294d3')+ 'cce37a4d4da631d3e58d547268e1663640d820c69e3b652d9691b44bcbcbb37b'+ '655b91807f6eefe28a6e7fe101baf337d5cc6cd5e6a7eb714ce638920a413fa2') # Heuristic to determine version of installed kernel # You can modify this if the heuristic fails@@ -36,6 +38,9 @@ # Fix configure checks on Arch Linux patch -p1 < "${srcdir}"/0001-cf-Ensure-BTF-info-is-created-in-tests-for-Linux.patch++ # Add patch for Linux 7.2+ patch -p1 < "${srcdir}"/0002-linux-replace-strncpy-with-strscpy.patch # Only needed when changes to configure were made ./regen.sh -qScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 13:50:58 | Medium | 1 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |