slim-defaultsession

LOW
maintainer orphaned 2 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source is a tarball from berlios.de, a now-defunct but formerly legitimate open-source hosting platform; the package builds from verifiable source code with a valid checksum, and no remote code execution or malicious behavior is present.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from berlios.de, a now-defunct but formerly legitimate open-source hosting platform; the package builds from verifiable source code with a valid checksum, and no remote code execution or malicious behavior is present.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:21 source=(http://download.berlios.de/slim/slim-$pkgver.tar.gz

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Travis Bloomfield <bloomfield.travis@gmail.com>
2# Contributor: Evangelos Foutras <evangelos@foutrelis.com>
3# Contributor: Gaetan Bisson <bisson@archlinux.org>
4# Contributor: Thayer Williams <thayer@archlinux.org>
5# Contributor: Alexander Fehr <pizzapunk gmail com>
6# Contributor: Hugo Ideler <hugoideler@dse.nl>
7
8pkgname=slim-defaultsession
9provides=('slim')
10conflicts=('slim')
11pkgver=1.3.6
12pkgrel=3
13pkgdesc="Desktop-independent graphical login manager for X11 patched to provide a default session."
14arch=('i686' 'x86_64')
15url="http://slim.berlios.de/"
16license=('GPL2')
17depends=('pam' 'libxmu' 'libpng' 'libjpeg' 'libxft' 'libxrandr' 'xorg-xauth')
18makedepends=('cmake' 'freeglut')
19backup=('etc/slim.conf' 'etc/logrotate.d/slim' 'etc/pam.d/slim'
20 'etc/slimlock.conf')
21source=(http://download.berlios.de/slim/slim-$pkgver.tar.gz
22 slim-1.3.6-fix-libslim-libraries.patch
23 slim-1.3.6-add-sessiondir.patch
24 slim.pam
25 slim.logrotate
26 slim-1.3.6-defaultsession.patch)
27sha256sums=('21defeed175418c46d71af71fd493cd0cbffd693f9d43c2151529125859810df'
28 '3dfa697f8c058390c7e02e7aba769475057ef8ddde945dc43b8cb7f9724dbda0'
29 '0dffd53a69eb9033a67fad964df6fc150ee7a483e29d8eb8b559010fbd14e5fd'
30 'b9a77a614c451287b574c33d41e28b5b149c6d2464bdb3a5274799842bca51a4'
31 '5bf44748b5003f2332d8b268060c400120b9100d033fa9d35468670d827f6def'
32 '2e19c988573608dbd728e36e4cb85d90838f654097ddef03a9a9b1043b113cb5')
33
34prepare() {
35 mv "$srcdir/slim-$pkgver" "$srcdir/$pkgname-$pkgver"
36 cd "$srcdir/$pkgname-$pkgver"
37
38 # Fix installation path of slim.service
39 sed -i 's|set(LIBDIR "/lib")|set(LIBDIR "/usr/lib")|' CMakeLists.txt
40
41 patch -Np1 -i "$srcdir/slim-1.3.6-fix-libslim-libraries.patch"
42 patch -Np1 -i "$srcdir/slim-1.3.6-add-sessiondir.patch"
43 patch -Np2 -i "$srcdir/slim-1.3.6-defaultsession.patch"
44}
45
46build() {
47 cd "$srcdir/$pkgname-$pkgver"
48
49 cmake \
50 -DCMAKE_INSTALL_PREFIX=/usr \
51 -DCMAKE_BUILD_TYPE=Release \
52 -DCMAKE_SKIP_RPATH=ON \
53 -DUSE_PAM=yes \
54 -DUSE_CONSOLEKIT=no
55 make
56}
57
58package() {
59 cd "$srcdir/$pkgname-$pkgver"
60
61 make DESTDIR="$pkgdir" install
62
63 install -Dm644 "$srcdir/slim.pam" "$pkgdir/etc/pam.d/slim"
64 install -Dm644 "$srcdir/slim.logrotate" "$pkgdir/etc/logrotate.d/slim"
65 install -Dm644 slimlock.conf "$pkgdir/etc/slimlock.conf"
66
67 # Provide sane defaults
68 sed -i -e 's|#xserver_arguments.*|xserver_arguments -nolisten tcp vt07|' \
69 -e 's|/var/run/slim.lock|/var/lock/slim.lock|' \
70 "$pkgdir/etc/slim.conf"
71}
72
73# vim:set ts=2 sw=2 et:
74

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion