systemd-remove-birthdate-ukify

LOW
maintainer clfarron4 0 votes base systemd-remove-birthdate scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The flagged pattern is a standard systemd .install script managing services and sysusers, which is normal for systemd packages and not inherently dangerous.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The flagged pattern is a standard systemd .install script managing services and sysusers, which is normal for systemd packages and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

  • PKGBUILD:304 install -d -o root -g root -m 2755 "$pkgdir"/var/log/journal

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Claire Farron <diesal3@googlemail.com>
2# Based on core/systemd by Christian Hesse <mail@eworm.de>
3
4pkgbase=systemd-remove-birthdate
5pkgname=('systemd-remove-birthdate'
6 'systemd-remove-birthdate-libs'
7 'systemd-remove-birthdate-resolvconf'
8 'systemd-remove-birthdate-sysvcompat'
9 'systemd-remove-birthdate-tests'
10 'systemd-remove-birthdate-ukify')
11# Upstream versioning is incompatible with pacman's version comparisons, one
12# way or another. We use proper version for pacman here (no dash for rc
13# release!), and change in source array below.
14pkgver=261.3
15pkgrel=1
16arch=('x86_64')
17license=('LGPL-2.1-or-later')
18url='https://www.github.com/systemd/systemd'
19makedepends=('acl' 'apparmor' 'cryptsetup' 'docbook-xsl' 'gperf' 'lz4' 'xz' 'pam' 'libelf'
20 'intltool' 'iptables' 'kmod' 'libarchive' 'libcap' 'libidn2' 'libgcrypt'
21 'libmicrohttpd' 'libxcrypt' 'libxslt' 'util-linux' 'linux-api-headers'
22 'python-jinja' 'python-lxml' 'quota-tools' 'shadow' 'git'
23 'meson' 'libseccomp' 'pcre2' 'audit' 'kexec-tools' 'libxkbcommon'
24 'bash-completion' 'p11-kit' 'systemd' 'libfido2' 'tpm2-tss' 'rsync'
25 'bpf' 'libbpf' 'clang' 'llvm' 'curl' 'gnutls' 'python-pyelftools'
26 'libpwquality' 'qrencode' 'lib32-gcc-libs' 'python-pefile' 'linux-headers')
27conflicts=("mkinitcpio<38-1")
28validpgpkeys=('63CDA1E5D3FC22B998D20DD6327F26951A015CC4' # Lennart Poettering <lennart@poettering.net>
29 'A9EA9081724FFAE0484C35A1A81CEA22BC8C7E2E' # Luca Boccassi <luca.boccassi@gmail.com>
30 '9A774DB5DB996C154EBBFBFDA0099A18E29326E1' # Yu Watanabe <watanabe.yu+github@gmail.com>
31 '5C251B5FC54EB2F80F407AAAC54CA336CFEB557E') # Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
32
33# For pacman's version comparisons $pkgver is missing the dash that would be
34# in an upstream rc version so add it back when fetching the tag from github.
35source=("git+https://github.com/systemd/systemd#tag=v${pkgver/rc/-rc}?signed"
36 '0001-Use-Arch-Linux-device-access-groups.patch'
37 # Remove BirthDate Fields
38 '0002-Remove-Birthdate-man-folders.patch'
39 '0003-Remove-Birthdate-src-folders.patch'
40 # bootloader files
41 'arch.conf'
42 'loader.conf'
43 'splash-arch.bmp'
44 # pam configuration
45 'systemd-user.pam'
46 # pacman / libalpm hooks
47 'systemd-hook'
48 '20-systemd-sysusers.hook'
49 '21-systemd-tmpfiles.hook'
50 '25-systemd-binfmt.hook'
51 '25-systemd-catalog.hook'
52 '25-systemd-hwdb.hook'
53 '25-systemd-sysctl.hook'
54 '30-systemd-daemon-reload-system.hook'
55 '30-systemd-daemon-reload-user.hook'
56 '35-systemd-enqueue-marked.hook'
57 '35-systemd-udev-reload.hook'
58 '35-systemd-update.hook'
59 '36-systemd-modules-load.hook')
60sha512sums=('d0cb1518becf7f105c2ce60f794bcddf4f8330174f56fcdfbd6b5f5e65fa94acb4098631ffe9d60a8b4e3c04b878f32c222b42dd827b5ff052bd460f4a30652a'
61 'ddb9401e47d0bf01874f255803a4b2167ec631484189d29d03694101fd9c77724e735f16d99c5f4ffd8061ae78839b2826ff0e0a925a6f0dbca25f2cfb271a82'
62 '1fa81fdfd50129955cdeb028473b99695b182c9e98da1594bd2db30705c712aadbe9deb31b2ce14f4baea945732f443a9862e226325facc4d5262d2118340f01'
63 '5e759d59ab97714d19c71d60360f524d27e06076a02bf1c0276f503b3b46c0db3aed912da96cf50ac29a5ce627bd68d4385ec22d13974d661006f9f7ed249b0f'
64 '61032d29241b74a0f28446f8cf1be0e8ec46d0847a61dadb2a4f096e8686d5f57fe5c72bcf386003f6520bc4b5856c32d63bf3efe7eb0bc0deefc9f68159e648'
65 '3194d1f8bff31b88a79657df83632b9224b66ca2cf8fd806a3ef35cf7a43f46c09c57f3dfd02256a99b6514a8f789b7d3bcfd7e17e00e34aa55ff0c6cedb5f01'
66 '5a1d78b5170da5abe3d18fdf9f2c3a4d78f15ba7d1ee9ec2708c4c9c2e28973469bc19386f70b3cf32ffafbe4fcc4303e5ebbd6d5187a1df3314ae0965b25e75'
67 '32580b82e97573d3e499821e2ce415ff134c0ec52c9b44a3c0862c4007d347f55636d6afac3dfc6831a9b384c7448075bdf3a12f369b4d8b62b24dfdb9c8a76a'
68 'f2f9c8de7fc10c84f8ad4b3286c6878d35cf80ac9841a55759db46f40e69b012b2d6a6638fb107a442c6e545558f864af1477f701bc0693dc452772be232b7a7'
69 '299dcc7094ce53474521356647bdd2fb069731c08d14a872a425412fcd72da840727a23664b12d95465bf313e8e8297da31259508d1c62cc2dcea596160e21c5'
70 'da7a97d5d3701c70dd5388b0440da39006ee4991ce174777931fea2aa8c90846a622b2b911f02ae4d5fffb92680d9a7e211c308f0f99c04896278e2ee0d9a4dc'
71 '0d6bc3d928cfafe4e4e0bc04dbb95c5d2b078573e4f9e0576e7f53a8fab08a7077202f575d74a3960248c4904b5f7f0661bf17dbe163c524ab51dd30e3cb80f7'
72 '2b50b25e8680878f7974fa9d519df7e141ca11c4bfe84a92a5d01bb193f034b1726ea05b3c0030bad1fbda8dbb78bf1dc7b73859053581b55ba813c39b27d9dc'
73 'a1661ab946c6cd7d3c6251a2a9fd68afe231db58ce33c92c42594aedb5629be8f299ba08a34713327b373a3badd1554a150343d8d3e5dfb102999c281bd49154'
74 '9426829605bbb9e65002437e02ed54e35c20fdf94706770a3dc1049da634147906d6b98bf7f5e7516c84068396a12c6feaf72f92b51bdf19715e0f64620319de'
75 'a436d3f5126c6c0d6b58c6865e7bd38dbfbfb7babe017eeecb5e9d162c21902cbf4e0a68cf3ac2f99815106f9fa003b075bd2b4eb5d16333fa913df6e2f3e32a'
76 '190112e38d5a5c0ca91b89cd58f95595262a551530a16546e1d84700fc9644aa2ca677953ffff655261e8a7bff6e6af4e431424df5f13c00bc90b77c421bc32d'
77 '51ebf20a1c93c2a86e8ced0d68e91f4a2bf6a537a2d674e05da69961d5861213159e28f228ffdc897bed721abd61ff133f49aeb0a9ebbbe76020c5b847c2a2df'
78 'a50d202a9c2e91a4450b45c227b295e1840cc99a5e545715d69c8af789ea3dd95a03a30f050d52855cabdc9183d4688c1b534eaa755ebe93616f9d192a855ee3'
79 '825b9dd0167c072ba62cabe0677e7cd20f2b4b850328022540f122689d8b25315005fa98ce867cf6e7460b2b26df16b88bb3b5c9ebf721746dce4e2271af7b97'
80 '717d93fb29034398394b68510f53da8d599cb68accf1cb92baee158fca1fde3fa5a1f698d35f81661b22c7acec6da34422b852e29dbc731b296a0884ffb6fcb0')
81
82_meson_version="${pkgver}-${pkgrel}"
83_systemd_src_dir="systemd"
84
85if ((_systemd_UPSTREAM)); then
86 _meson_version="${pkgver}"
87fi
88
89# Some heuristics to detect that we are building on OBS, with no network access. Skip
90# git verification, and use the OBS-provided tarball instead. The sources will be
91# unpacked by OBS in $package-$version/
92if [ -f /.build/build.dist ] && [ -d /usr/src/packages/SOURCES ] && [ -d /usr/src/packages/BUILD ] && [ -d /usr/src/packages/OTHER ]; then
93 source[0]="$(find . -name "systemd-${pkgver}.tar.*" -print -quit)"
94 sha512sums[0]='SKIP'
95 _systemd_src_dir="systemd-${pkgver}"
96fi
97
98_backports=(
99)
100
101_reverts=(
102)
103
104prepare() {
105 cd "${_systemd_src_dir}"
106
107 # return if not a git repository
108 if ! git status >/dev/null 2>&1; then
109 return
110 fi
111
112 local _c _l
113 for _c in "${_backports[@]}"; do
114 if [[ "${_c}" == *..* ]]; then _l='--reverse'; else _l='--max-count=1'; fi
115 git log --oneline "${_l}" "${_c}"
116 git cherry-pick --mainline 1 --no-commit "${_c}"
117 done
118 for _c in "${_reverts[@]}"; do
119 if [[ "${_c}" == *..* ]]; then _l='--reverse'; else _l='--max-count=1'; fi
120 git log --oneline "${_l}" "${_c}"
121 git revert --mainline 1 --no-commit "${_c}"
122 done
123
124 # Replace cdrom/dialout/tape groups with optical/uucp/storage
125 patch -Np1 -i ../0001-Use-Arch-Linux-device-access-groups.patch
126 patch -Np1 -i ../0002-Remove-Birthdate-man-folders.patch
127 patch -Np1 -i ../0003-Remove-Birthdate-src-folders.patch
128}
129
130build() {
131 local _timeservers=({0..3}.arch.pool.ntp.org)
132 local _nameservers=(
133 # We use these public name services, ordered by their privacy policy (hopefully):
134 # * Quad9 (https://quad9.net/privacy/policy/)
135 '9.9.9.9#dns.quad9.net'
136 '2620:fe::9#dns.quad9.net'
137 # * Cloudflare (https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver/)
138 '1.1.1.1#cloudflare-dns.com'
139 '2606:4700:4700::1111#cloudflare-dns.com'
140 # * Google (https://developers.google.com/speed/public-dns/privacy)
141 '8.8.8.8#dns.google'
142 '2001:4860:4860::8888#dns.google'
143 # You do not agree? Fine, change it in your local configuration.
144 )
145
146 local _meson_options=(
147 -Dversion-tag="${_meson_version}-arch"
148 -Dvcs-tag=false
149 -Dshared-lib-tag="${_meson_version}"
150 -Dmode=release
151
152 -Dapparmor=enabled
153 -Dbootloader=enabled
154 -Dxenctrl=disabled
155 -Dbpf-framework=enabled
156 -Dima=false
157 -Dinstall-tests=true
158 -Dlibidn2=enabled
159 -Dlz4=enabled
160 -Dman=enabled
161 -Dselinux=disabled
162 -Dsshdprivsepdir=/usr/share/empty.sshd
163 -Dsysupdated=enabled
164 -Dvmlinux-h=provided
165 -Dvmlinux-h-path=/usr/src/linux/vmlinux.h
166
167 -Dcompat-sysv-interfaces=false
168 -Ddbuspolicydir=/usr/share/dbus-1/system.d
169 -Ddefault-dnssec=no
170 -Ddefault-kill-user-processes=false
171 -Ddefault-locale='C.UTF-8'
172 -Dlocalegen-path=/usr/bin/locale-gen
173 -Ddns-over-tls=openssl
174 -Dfallback-hostname='archlinux'
175 -Dnologin-path=/usr/bin/nologin
176 -Dntp-servers="${_timeservers[*]}"
177 -Ddns-servers="${_nameservers[*]}"
178 -Drpmmacrosdir=no
179
180 -Dsbat-distro='arch'
181 -Dsbat-distro-summary='Arch Linux AUR'
182 -Dsbat-distro-pkgname="${pkgname}"
183 -Dsbat-distro-version="${pkgver}"
184 -Dsbat-distro-url="https://aur.archlinux.org/pkgbase/${pkgname}"
185 )
186
187 arch-meson "${_systemd_src_dir}" build "${_meson_options[@]}" $MESON_EXTRA_CONFIGURE_OPTIONS
188
189 meson compile -C build
190}
191
192check() {
193 meson test -C build --print-errorlogs
194}
195
196package_systemd-remove-birthdate() {
197 pkgdesc='system and service manager with birthdate functions removed'
198
199 license+=(
200 'CC0-1.0' # siphash
201 'GPL-2.0-or-later' # udev
202 'MIT-0' # documentation and config files
203 )
204
205 # Not all libs are linked, but opened via dlopen() pointed out by 6511918 at
206 # https://aur.archlinux.org/pkgbase/systemd-git#comment-1041291
207
208 depends=(
209 "systemd-remove-birthdate-libs=${pkgver}"
210 'acl' 'bash' 'cryptsetup' 'dbus'
211 'dbus-units' 'glibc' 'kbd' 'kmod' 'hwdata'
212 'libgcrypt' 'libxcrypt' 'libidn2' 'lz4' 'pam'
213 'libelf' 'libgcc' 'libseccomp' 'util-linux' 'xz' 'pcre2' 'audit'
214 'openssl')
215 provides=('nss-myhostname' "systemd-tools=${pkgver}" "udev=${pkgver}")
216 provides+=("systemd=${pkgver}")
217
218 replaces=('nss-myhostname' 'systemd-tools' 'udev')
219 conflicts=('nss-myhostname' 'systemd-tools' 'udev')
220
221 conflicts+=('systemd' 'systemd-git' 'systemd-liberated-git')
222
223 optdepends=(
224 'apparmor: additional security features'
225 'curl: systemd-journal-upload, machinectl pull-tar and pull-raw'
226 'gnutls: systemd-journal-gatewayd and systemd-journal-remote'
227 'iptables: firewall features'
228 'libarchive: convert DDIs to tarballs'
229 'libbpf: support BPF programs'
230 'libfido2: unlocking LUKS2 volumes with FIDO2 token'
231 'libmicrohttpd: systemd-journal-gatewayd and systemd-journal-remote'
232 'libp11-kit: support PKCS#11'
233 'libpwquality: check password quality'
234 'polkit: allow administration as unprivileged user'
235 'qemu-base: systemd-vmspawn'
236 'qrencode: show QR codes'
237 'quota-tools: kernel-level quota management'
238 'systemd-sysvcompat: symlink package to provide sysvinit binaries'
239 'systemd-ukify: combine kernel and initrd into a signed Unified Kernel Image'
240 'tpm2-tss: unlocking LUKS2 volumes with TPM2')
241 backup=(etc/systemd/coredump.conf
242 etc/systemd/homed.conf
243 etc/systemd/journald.conf
244 etc/systemd/journal-remote.conf
245 etc/systemd/journal-upload.conf
246 etc/systemd/logind.conf
247 etc/systemd/networkd.conf
248 etc/systemd/oomd.conf
249 etc/systemd/pstore.conf
250 etc/systemd/resolved.conf
251 etc/systemd/sleep.conf
252 etc/systemd/system.conf
253 etc/systemd/timesyncd.conf
254 etc/systemd/user.conf
255 etc/udev/iocost.conf
256 etc/udev/udev.conf)
257 install=systemd.install
258
259 meson install -C build --no-rebuild --destdir "$pkgdir" --quiet
260
261 # runtime libraries shipped with systemd-libs
262 install -d -m0755 systemd-libs/lib/
263 mv "$pkgdir"/usr/lib/lib{nss,systemd,udev}*.so* systemd-libs/lib/
264 mv "$pkgdir"/usr/lib/pkgconfig systemd-libs/lib/pkgconfig
265 mv "$pkgdir"/usr/include systemd-libs/include
266 mv "$pkgdir"/usr/share/man/man3 systemd-libs/man3
267 install -d -m0755 systemd-libs/man8/
268 mv "$pkgdir"/usr/share/man/man8/*nss* systemd-libs/man8/
269
270 # ukify shipped in separate package
271 install -d -m0755 systemd-ukify/{bin,systemd,man1,install.d}
272 mv "$pkgdir"/usr/bin/ukify systemd-ukify/bin/
273 mv "$pkgdir"/usr/lib/systemd/ukify systemd-ukify/systemd/
274 mv "$pkgdir"/usr/share/man/man1/ukify.1 systemd-ukify/man1/
275 # we move the ukify hook itself, but keep 90-uki-copy.install in place,
276 # because there are other ways to generate UKIs w/o ukify, e.g. w/ mkinitcpio
277 mv "$pkgdir"/usr/lib/kernel/install.d/60-ukify.install systemd-ukify/install.d
278
279 # manpages shipped with systemd-sysvcompat
280 rm "$pkgdir"/usr/share/man/man1/init.1
281 rm "$pkgdir"/usr/share/man/man8/{halt,poweroff,reboot,shutdown}.8
282
283 # executable (symlinks) shipped with systemd-sysvcompat
284 rm "$pkgdir"/usr/bin/{halt,init,poweroff,reboot,shutdown}
285
286 # files shipped with systemd-resolvconf
287 rm "$pkgdir"/usr/{bin/resolvconf,share/man/man1/resolvconf.1}
288
289 # tests shipped with systemd-tests (for upstream)
290 install -d -m0755 systemd-tests/
291 mv "$pkgdir"/usr/lib/systemd/tests systemd-tests/
292
293 # avoid a potential conflict with [core]/filesystem
294 rm "$pkgdir"/usr/share/factory/etc/{issue,nsswitch.conf}
295 sed -i -e '/^C \/etc\/nsswitch\.conf/d' \
296 -e '/^C \/etc\/issue/d' "$pkgdir"/usr/lib/tmpfiles.d/etc.conf
297
298 # ship default policy to leave services disabled
299 echo 'disable *' >"$pkgdir"/usr/lib/systemd/system-preset/99-default.preset
300
301 # The group 'systemd-journal' is allocated dynamically and may have varying
302 # gid on different systems. Let's install with gid 0 (root), systemd-tmpfiles
303 # will fix the permissions for us. (see /usr/lib/tmpfiles.d/systemd.conf)
304 install -d -o root -g root -m 2755 "$pkgdir"/var/log/journal
305
306 # add example bootctl configuration
307 install -D -m0644 arch.conf "$pkgdir"/usr/share/systemd/bootctl/arch.conf
308 install -D -m0644 loader.conf "$pkgdir"/usr/share/systemd/bootctl/loader.conf
309 install -D -m0644 splash-arch.bmp "$pkgdir"/usr/share/systemd/bootctl/splash-arch.bmp
310
311 # pacman hooks
312 install -D -m0755 systemd-hook "$pkgdir"/usr/share/libalpm/scripts/systemd-hook
313 install -D -m0644 -t "$pkgdir"/usr/share/libalpm/hooks *.hook
314
315 # overwrite the systemd-user PAM configuration with our own
316 install -D -m0644 systemd-user.pam "$pkgdir"/usr/lib/pam.d/systemd-user
317
318 # create a directory for cryptsetup keys
319 install -d -m0700 "$pkgdir"/etc/cryptsetup-keys.d
320
321 # handle uncommon license
322 install -d -m0755 "$pkgdir/usr/share/licenses/systemd"
323 ln -s -t "$_" /usr/share/doc/systemd/LICENSES/MIT-0.txt
324
325 # symlink kernel-install to installkernel
326 ln -s kernel-install "$pkgdir"/usr/bin/installkernel
327 ln -s kernel-install.8.gz "$pkgdir"/usr/share/man/man8/installkernel.8.gz
328}
329
330package_systemd-remove-birthdate-libs() {
331 pkgdesc='systemd client libraries with birthdate functions removed'
332
333 depends=('glibc' 'libgcc' 'libgcc_s.so' 'libgcrypt' 'lz4' 'xz' 'zstd')
334 license+=(
335 'CC0-1.0' # siphash
336 'GPL-2.0-or-later WITH Linux-syscall-note' # src/basic/linux/*
337 )
338 provides=('libsystemd' 'libsystemd.so' 'libudev.so')
339
340 provides+=("systemd-libs=${pkgver}")
341 conflicts=('libsystemd' 'systemd-libs-git' 'systemd-liberated-libs-git')
342 conflicts+=('systemd-libs')
343
344
345 install -d -m0755 "$pkgdir"/usr/share/man
346 mv systemd-libs/lib "$pkgdir"/usr/lib
347 mv systemd-libs/include "$pkgdir"/usr/include
348 mv systemd-libs/man3 "$pkgdir"/usr/share/man/man3
349 mv systemd-libs/man8 "$pkgdir"/usr/share/man/man8
350}
351
352package_systemd-remove-birthdate-resolvconf() {
353 pkgdesc='systemd resolvconf replacement with birthdate functions removed (for use with systemd-resolved)'
354 depends=("systemd-remove-birthdate=${pkgver}")
355 provides=('openresolv' 'resolvconf')
356
357 provides+=("systemd-resolvconf=${pkgver}")
358 conflicts=('resolvconf' 'systemd-resolvconf-git' 'systemd-liberated-resolvconf-git')
359 conflicts+=('systemd-resolvconf')
360
361
362 install -d -m0755 "$pkgdir"/usr/bin
363 ln -s resolvectl "$pkgdir"/usr/bin/resolvconf
364
365 install -d -m0755 "$pkgdir"/usr/share/man/man1
366 ln -s resolvectl.1.gz "$pkgdir"/usr/share/man/man1/resolvconf.1.gz
367}
368
369package_systemd-remove-birthdate-sysvcompat() {
370 pkgdesc='sysvinit compat for systemd with birthdate functions removed'
371
372 conflicts=('sysvinit')
373
374 conflicts+=('systemd-sysvcompat' 'systemd-sysvcompat-git' 'systemd-liberated-sysvcompat-git')
375 depends=("systemd-remove-birthdate=${pkgver}")
376 provides=("systemd-sysvcompat=${pkgver}")
377
378 install -D -m0644 -t "$pkgdir"/usr/share/man/man1 \
379 build/man/init.1
380 install -D -m0644 -t "$pkgdir"/usr/share/man/man8 \
381 build/man/{halt,poweroff,reboot,shutdown}.8
382
383 install -d -m0755 "$pkgdir"/usr/bin
384 ln -s ../lib/systemd/systemd "$pkgdir"/usr/bin/init
385 for tool in halt poweroff reboot shutdown; do
386 ln -s systemctl "$pkgdir"/usr/bin/$tool
387 done
388}
389
390package_systemd-remove-birthdate-tests() {
391 pkgdesc='systemd tests with birthdate functions removed'
392 conflicts=('systemd-tests' 'systemd-tests-git' 'systemd-liberated-tests-git')
393 provides=("systemd-tests=${pkgver}")
394 depends=(
395 'bash'
396 'glibc'
397 'libgcc'
398 'python'
399 'python-packaging'
400 'python-colorama'
401 'python-pexpect'
402 'python-pytest'
403 'python-psutil'
404 "systemd-remove-birthdate=${pkgver}-${pkgrel}"
405 "systemd-remove-birthdate-libs=${pkgver}-${pkgrel}")
406
407 install -d -m0755 "$pkgdir"/usr/lib/systemd
408 mv systemd-tests/tests "$pkgdir"/usr/lib/systemd/tests
409}
410
411package_systemd-remove-birthdate-ukify() {
412 pkgdesc='Combine kernel and initrd into a signed Unified Kernel Image'
413
414 conflicts=('systemd-ukify' 'systemd-ukify-git' 'systemd-liberated-ukify-git')
415
416 provides=('ukify')
417 provides+=("systemd-ukify=$pkgver")
418 depends=("systemd-remove-birthdate=${pkgver}" 'binutils' 'python' 'python-cryptography' 'python-pefile')
419 optdepends=('python-pillow: Show the size of splash image'
420 'sbsigntools: Sign the embedded kernel')
421
422 install -d -m0755 "$pkgdir"/usr/{lib/kernel,share/man}
423 mv systemd-ukify/bin "$pkgdir"/usr/bin
424 mv systemd-ukify/systemd "$pkgdir"/usr/lib/systemd
425 mv systemd-ukify/man1 "$pkgdir"/usr/share/man/man1
426 mv systemd-ukify/install.d "$pkgdir"/usr/lib/kernel/install.d
427}
428
429# vim:ft=sh syn=sh et sw=2:
430

Changes since previous scan

--- PKGBUILD @ 2026-09-13 00:19
+++ PKGBUILD @ 2026-09-17 00:27
@@ -11,7 +11,7 @@
# Upstream versioning is incompatible with pacman's version comparisons, one
# way or another. We use proper version for pacman here (no dash for rc
# release!), and change in source array below.
-pkgver=261.2
+pkgver=261.3
pkgrel=1
arch=('x86_64')
license=('LGPL-2.1-or-later')
@@ -55,8 +55,9 @@
'30-systemd-daemon-reload-user.hook'
'35-systemd-enqueue-marked.hook'
'35-systemd-udev-reload.hook'
- '35-systemd-update.hook')
-sha512sums=('1c2a3aed0b7c613040722ef1bd063a1f35d2f3993e0f678701ef5e4d42d31628804df477158e5fa2bb47e523a9969d01cfb7622762cf32ff44e0367e5f432368'
+ '35-systemd-update.hook'
+ '36-systemd-modules-load.hook')
+sha512sums=('d0cb1518becf7f105c2ce60f794bcddf4f8330174f56fcdfbd6b5f5e65fa94acb4098631ffe9d60a8b4e3c04b878f32c222b42dd827b5ff052bd460f4a30652a'
'ddb9401e47d0bf01874f255803a4b2167ec631484189d29d03694101fd9c77724e735f16d99c5f4ffd8061ae78839b2826ff0e0a925a6f0dbca25f2cfb271a82'
'1fa81fdfd50129955cdeb028473b99695b182c9e98da1594bd2db30705c712aadbe9deb31b2ce14f4baea945732f443a9862e226325facc4d5262d2118340f01'
'5e759d59ab97714d19c71d60360f524d27e06076a02bf1c0276f503b3b46c0db3aed912da96cf50ac29a5ce627bd68d4385ec22d13974d661006f9f7ed249b0f'
@@ -75,7 +76,8 @@
'190112e38d5a5c0ca91b89cd58f95595262a551530a16546e1d84700fc9644aa2ca677953ffff655261e8a7bff6e6af4e431424df5f13c00bc90b77c421bc32d'
'51ebf20a1c93c2a86e8ced0d68e91f4a2bf6a537a2d674e05da69961d5861213159e28f228ffdc897bed721abd61ff133f49aeb0a9ebbbe76020c5b847c2a2df'
'a50d202a9c2e91a4450b45c227b295e1840cc99a5e545715d69c8af789ea3dd95a03a30f050d52855cabdc9183d4688c1b534eaa755ebe93616f9d192a855ee3'
- '825b9dd0167c072ba62cabe0677e7cd20f2b4b850328022540f122689d8b25315005fa98ce867cf6e7460b2b26df16b88bb3b5c9ebf721746dce4e2271af7b97')
+ '825b9dd0167c072ba62cabe0677e7cd20f2b4b850328022540f122689d8b25315005fa98ce867cf6e7460b2b26df16b88bb3b5c9ebf721746dce4e2271af7b97'
+ '717d93fb29034398394b68510f53da8d599cb68accf1cb92baee158fca1fde3fa5a1f698d35f81661b22c7acec6da34422b852e29dbc731b296a0884ffb6fcb0')
_meson_version="${pkgver}-${pkgrel}"
_systemd_src_dir="systemd"
@@ -206,9 +208,9 @@
depends=(
"systemd-remove-birthdate-libs=${pkgver}"
'acl' 'bash' 'cryptsetup' 'dbus'
- 'dbus-units' 'kbd' 'kmod' 'hwdata'
+ 'dbus-units' 'glibc' 'kbd' 'kmod' 'hwdata'
'libgcrypt' 'libxcrypt' 'libidn2' 'lz4' 'pam'
- 'libelf' 'libseccomp' 'util-linux' 'xz' 'pcre2' 'audit'
+ 'libelf' 'libgcc' 'libseccomp' 'util-linux' 'xz' 'pcre2' 'audit'
'openssl')
provides=('nss-myhostname' "systemd-tools=${pkgver}" "udev=${pkgver}")
provides+=("systemd=${pkgver}")
@@ -389,7 +391,18 @@
pkgdesc='systemd tests with birthdate functions removed'
conflicts=('systemd-tests' 'systemd-tests-git' 'systemd-liberated-tests-git')
provides=("systemd-tests=${pkgver}")
- depends=("systemd-remove-birthdate=${pkgver}")
+ depends=(
+ 'bash'
+ 'glibc'
+ 'libgcc'
+ 'python'
+ 'python-packaging'
+ 'python-colorama'
+ 'python-pexpect'
+ 'python-pytest'
+ 'python-psutil'
+ "systemd-remove-birthdate=${pkgver}-${pkgrel}"
+ "systemd-remove-birthdate-libs=${pkgver}-${pkgrel}")
install -d -m0755 "$pkgdir"/usr/lib/systemd
mv systemd-tests/tests "$pkgdir"/usr/lib/systemd/tests
@@ -402,7 +415,7 @@
provides=('ukify')
provides+=("systemd-ukify=$pkgver")
- depends=("systemd-remove-birthdate=${pkgver}" 'binutils' 'python-cryptography' 'python-pefile')
+ depends=("systemd-remove-birthdate=${pkgver}" 'binutils' 'python' 'python-cryptography' 'python-pefile')
optdepends=('python-pillow: Show the size of splash image'
'sbsigntools: Sign the embedded kernel')

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 17:14:56 Medium 1
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion