openafs-modules-dkms
LOW
maintainer Bevan
17 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is downloaded from the official project domain openafs.org, which is the legitimate and expected source for OpenAFS; the non-whitelisted host is the project's own official site, making this a normal and safe AUR package build.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is downloaded from the official project domain openafs.org, which is the legitimate and expected source for OpenAFS; the non-whitelisted host is the project's own official site, making this a normal and safe AUR package build.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:19
source=(http://openafs.org/dl/openafs/${pkgver}/${_srcname}-${pkgver}-src.tar.bz2
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Michael Lass <bevan@bi-co.net>
2
# Contributor: Konstantin Gizdov <arch at kge dot pw>
3
4
# This PKGBUILD is maintained on github:
5
# https://github.com/michaellass/AUR
6
7
pkgname=openafs-modules-dkms
8
_srcname=openafs
9
pkgver=1.8.16.1
10
pkgrel=2
11
pkgdesc="Kernel module for OpenAFS (dkms)"
12
arch=('i686' 'x86_64' 'armv7h')
13
url="http://www.openafs.org"
14
license=(IPL-1.0)
15
depends=('dkms' 'libelf' 'openafs>=1.8.12.1-2')
16
provides=("openafs-modules=$pkgver")
17
conflicts=('openafs-features-libafs' 'openafs-modules' 'openafs<1.6.6-2')
18
options=(!emptydirs)
19
source=(http://openafs.org/dl/openafs/${pkgver}/${_srcname}-${pkgver}-src.tar.bz2
20
dkms.conf
21
0001-cf-Ensure-BTF-info-is-created-in-tests-for-Linux.patch
22
0002-linux-replace-strncpy-with-strscpy.patch)
23
sha256sums=('cf59067589a295471e3f10f644f0f2165113347cc8b0ad0fbb4123259a2af0a2'
24
'306408d644e8781f13e09021449cb1ccbba60f69d1d24eca5f8138e9b3e47d8e'
25
'cce37a4d4da631d3e58d547268e1663640d820c69e3b652d9691b44bcbcbb37b'
26
'655b91807f6eefe28a6e7fe101baf337d5cc6cd5e6a7eb714ce638920a413fa2')
27
28
prepare() {
29
cd "${srcdir}/${_srcname}-${pkgver}"
30
31
# Fix configure checks on Arch Linux
32
patch -p1 < "${srcdir}"/0001-cf-Ensure-BTF-info-is-created-in-tests-for-Linux.patch
33
34
# Add patch for Linux 7.2
35
patch -p1 < "${srcdir}"/0002-linux-replace-strncpy-with-strscpy.patch
36
37
# Only needed when changes to configure were made
38
./regen.sh -q
39
}
40
41
build() {
42
cd "${srcdir}/${_srcname}-${pkgver}"
43
44
case "$CARCH" in
45
"i686") sysname=i386_linux26 ;;
46
"x86_64") sysname=amd64_linux26 ;;
47
"armv7h") sysname=arm_linux26 ;;
48
*) error "Unknown architecture '$CARCH'" && false
49
esac
50
51
./configure --prefix=/usr \
52
--sysconfdir=/etc \
53
--sbindir=/usr/bin \
54
--libexecdir=/usr/lib \
55
--disable-fuse-client \
56
--disable-kernel-module \
57
--without-swig \
58
--with-afs-sysname=$sysname
59
60
make only_libafs_tree
61
}
62
63
package() {
64
65
# install license
66
install -Dm644 "${srcdir}/${_srcname}-${pkgver}/LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
67
68
# install sources
69
install -dm755 "${pkgdir}/usr/src/${_srcname}-${pkgver}"
70
mv "${srcdir}/${_srcname}-${pkgver}/libafs_tree/"* "${pkgdir}/usr/src/${_srcname}-${pkgver}"
71
sed "s/__VERSION__/$pkgver/" "${srcdir}/dkms.conf" > "${pkgdir}/usr/src/${_srcname}-${pkgver}/dkms.conf"
72
73
}
74
Changes since previous scan
--- PKGBUILD @ 2026-09-02 00:02+++ PKGBUILD @ 2026-09-17 00:27@@ -7,7 +7,7 @@ pkgname=openafs-modules-dkms _srcname=openafs pkgver=1.8.16.1-pkgrel=1+pkgrel=2 pkgdesc="Kernel module for OpenAFS (dkms)" arch=('i686' 'x86_64' 'armv7h') url="http://www.openafs.org"@@ -18,16 +18,21 @@ options=(!emptydirs) source=(http://openafs.org/dl/openafs/${pkgver}/${_srcname}-${pkgver}-src.tar.bz2 dkms.conf- 0001-cf-Ensure-BTF-info-is-created-in-tests-for-Linux.patch)+ 0001-cf-Ensure-BTF-info-is-created-in-tests-for-Linux.patch+ 0002-linux-replace-strncpy-with-strscpy.patch) sha256sums=('cf59067589a295471e3f10f644f0f2165113347cc8b0ad0fbb4123259a2af0a2' '306408d644e8781f13e09021449cb1ccbba60f69d1d24eca5f8138e9b3e47d8e'- 'bcd276a3e41d5c5a7eb437718c4143b63ac36ed851df9db091653754d4b294d3')+ 'cce37a4d4da631d3e58d547268e1663640d820c69e3b652d9691b44bcbcbb37b'+ '655b91807f6eefe28a6e7fe101baf337d5cc6cd5e6a7eb714ce638920a413fa2') prepare() { cd "${srcdir}/${_srcname}-${pkgver}" # Fix configure checks on Arch Linux patch -p1 < "${srcdir}"/0001-cf-Ensure-BTF-info-is-created-in-tests-for-Linux.patch++ # Add patch for Linux 7.2+ patch -p1 < "${srcdir}"/0002-linux-replace-strncpy-with-strscpy.patch # Only needed when changes to configure were made ./regen.sh -qScan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 13:50:58 | Medium | 1 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |