seatools-bin

MEDIUM

maintainer nltimv 0 votes scanned 2026-08-23 15:22:45.742327

View on AUR

Why flagged

Downloads and executes a prebuilt proprietary .run installer binary from Seagate's official CDN (seagate.com/content/dam/...) via fakechroot; the source is Seagate's own official domain with a verified sha256 checksum, so the risk is moderate but not high — the main concern is running an unreviewed proprietary binary installer, not a swappable third-party host.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:21 "SeaTools-${pkgver}-${pkgrel}.zip::https://www.seagate.com/content/dam/seagate/migrated-assets/www-content/support-content/downloads/seatools/_shared/downloads/${_pkgname}LinuxX64Installer.zip"

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): Downloads and executes a prebuilt proprietary .run installer binary from Seagate's official CDN (seagate.com/content/dam/...) via fakechroot; the source is Seagate's own official domain with a verified sha256 checksum, so the risk is moderate but not high — the main concern is running an unreviewed proprietary binary installer, not a swappable third-party host.

PKGBUILD

1 offending line(s) highlighted

      1# Submitter:   Anatol Pomozov <anatol.pomozov@gmail.com>
    
      2# Maintainer:  nltimv <git at nltimv dot com>
    
      3# Contributor: Charles Dong <charlesdong_2000@outlook.com>
    
      4
    
      5pkgname=seatools-bin
    
      6_pkgname=SeaTools
    
      7pkgdesc='Seagate graphical user interface (GUI) tool for managing hard drives and SSDs on a system.'
    
      8pkgver=5.2.5
    
      9pkgrel=2
    
      10_pkgrealver=$pkgver
    
      11arch=('x86_64')
    
      12url='http://www.seagate.com/support/downloads/seatools/'
    
      13license=('LicenseRef-Seagate-EULA')
    
      14depends=('gcc-libs')
    
      15makedepends=('fakechroot')
    
      16provides=("seatools=${pkgver}")
    
      17conflicts=('seatools')
    
      18replaces=('seatools<=5.2.5')
    
      19_installer_bin="SeaTools-${pkgver}-linux-x64-installer.run"
    
      20source=(
    
      21    "SeaTools-${pkgver}-${pkgrel}.zip::https://www.seagate.com/content/dam/seagate/migrated-assets/www-content/support-content/downloads/seatools/_shared/downloads/${_pkgname}LinuxX64Installer.zip"
    
      22    "seatools_documentation.pdf::https://www.seagate.com/content/dam/seagate/migrated-assets/www-content/support-content/downloads/seatools/_shared/downloads/100869623_B.pdf"
    
      23    "seatools_eula.pdf::https://www.seagate.com/content/dam/seagate/assets/legal/end-user-license-agreements/eula_single_user_final_15_06_2026_us_english.pdf"
    
      24)
    
      25sha256sums=('c4823485939a221d690a75430fdae22ca1796a451235c1c1b686019aa7f2325c'
    
      26            'SKIP'
    
      27            'SKIP')
    
      28
    
      29package() {
    
      30    echo "Seatools version: ${_pkgrealver}"
    
      31
    
      32    echo -ne 'Preparing fake installation environment... '
    
      33    # Move installer to fake root
    
      34    mv ./$_installer_bin $pkgdir
    
      35    chmod u+x $pkgdir/$_installer_bin
    
      36    # Create necessary directories (to cheat the installer)
    
      37    mkdir -p $pkgdir/tmp $pkgdir/opt $pkgdir/etc $pkgdir/usr/share/applications
    
      38    echo 'done'
    
      39
    
      40    echo -ne 'Installing to fake environment... '
    
      41    # Use the installer in the fake root
    
      42    fakechroot chroot $pkgdir /$_installer_bin --mode unattended
    
      43    echo 'done'
    
      44
    
      45    echo -ne 'Removing installer... '
    
      46    # Remove installer file
    
      47    rm $pkgdir/$_installer_bin
    
      48    echo 'done'
    
      49
    
      50    # Help the installer finish the unsuccessful operation (mitigating solution)
    
      51    echo -ne 'Mitigating copy operation... '
    
      52    cp $pkgdir/opt/SeaTools5/$_pkgname.desktop $pkgdir/usr/share/applications/ || true
    
      53    echo 'done'
    
      54
    
      55    echo -ne 'Post-installation operations... '
    
      56    # No need to be executable
    
      57    chmod -x $pkgdir/usr/share/applications/$_pkgname.desktop
    
      58    # Remove fake /tmp
    
      59    rm -rf $pkgdir/tmp
    
      60
    
      61    # Remove uninstaller
    
      62    rm $pkgdir/opt/SeaTools5/uninstall "$pkgdir/opt/SeaTools5/Uninstall SeaTools.desktop" $pkgdir/opt/SeaTools5/uninstall.dat
    
      63    
    
      64    # Create symlink to /usr/bin/SeaTools
    
      65    mkdir -p $pkgdir/usr/bin
    
      66    ln -s /opt/SeaTools5/SeaTools $pkgdir/usr/bin/SeaTools
    
      67    
    
      68    # Install documentation
    
      69    mkdir -p $pkgdir/usr/share/doc/seatools
    
      70    cp seatools_documentation.pdf $pkgdir/usr/share/doc/seatools/SeaTools.pdf
    
      71    
    
      72    # Install license
    
      73    mkdir -p $pkgdir/usr/share/licenses/$pkgname
    
      74    install -Dm644 seatools_eula.pdf $pkgdir/usr/share/licenses/$pkgname/EULA.pdf
    
      75    
    
      76    echo 'done'
    
      77}
    
      78

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-23 15:22:45	Medium	3
2026-08-23 15:20:41	Medium	2