systemd-ukify-git

MEDIUM
maintainer Atsutane 11 votes base systemd-git scanned 2026-10-26 13:45:05.165605
View on AUR
Why flagged

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

Triggered rules

Medium Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

  • PKGBUILD:257 install -d -o root -g root -m 2755 "$pkgdir"/var/log/journal

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Thorsten Toepper <atsutane-aur at freethoughts dot de>
2# Contributor: Yurii Kolesnykov <root@yurikoles.com>
3# Based on core/systemd by Christian Hesse <mail@eworm.de>
4
5pkgbase=systemd-git
6pkgname=('systemd-git'
7 'systemd-libs-git'
8 'systemd-resolvconf-git'
9 'systemd-sysvcompat-git'
10 'systemd-tests-git'
11 'systemd-ukify-git')
12pkgdesc='systemd (git version)'
13pkgver=263.devel.r92904.80f70d2af65
14pkgrel=1
15arch=('x86_64')
16license=('LGPL-2.1-or-later')
17url='https://www.github.com/systemd/systemd'
18makedepends=('acl' 'apparmor' 'cryptsetup' 'docbook-xsl' 'gperf' 'lz4' 'xz' 'pam' 'libelf'
19 'intltool' 'iptables' 'kmod' 'libarchive' 'libidn2' 'libgcrypt'
20 'libmicrohttpd' 'libxcrypt' 'libxslt' 'util-linux' 'linux-api-headers'
21 'python-jinja' 'python-lxml' 'quota-tools' 'shadow' 'git'
22 'meson' 'libseccomp' 'pcre2' 'audit' 'kexec-tools' 'libxkbcommon'
23 'bash-completion' 'p11-kit' 'systemd' 'libfido2' 'tpm2-tss' 'rsync'
24 'bpf' 'libbpf' 'clang' 'llvm' 'curl' 'gnutls' 'python-pyelftools'
25 'libpwquality' 'qrencode' 'lib32-gcc-libs' 'python-pefile' 'linux-headers'
26 'rust' 'rust-bindgen')
27conflicts=("mkinitcpio<38-1")
28options=('!strip')
29source=("$pkgbase-stable::git+https://github.com/systemd/systemd"
30 '0001-Use-Arch-Linux-device-access-groups.patch'
31 # bootloader files
32 'arch.conf'
33 'loader.conf'
34 'splash-arch.bmp'::'https://gitlab.archlinux.org/archlinux/packaging/packages/systemd/-/raw/main/splash-arch.bmp'
35 # pam configuration
36 'systemd-user.pam'
37 # pacman / libalpm hooks
38 'systemd-hook'
39 '20-systemd-sysusers.hook'
40 '21-systemd-tmpfiles.hook'
41 '25-systemd-binfmt.hook'
42 '25-systemd-catalog.hook'
43 '25-systemd-hwdb.hook'
44 '25-systemd-sysctl.hook'
45 '30-systemd-daemon-reload-system.hook'
46 '30-systemd-daemon-reload-user.hook'
47 '35-systemd-enqueue-marked.hook'
48 '35-systemd-udev-reload.hook'
49 '35-systemd-update.hook'
50 '36-systemd-modules-load.hook')
51sha512sums=('SKIP'
52 'ddb9401e47d0bf01874f255803a4b2167ec631484189d29d03694101fd9c77724e735f16d99c5f4ffd8061ae78839b2826ff0e0a925a6f0dbca25f2cfb271a82'
53 '61032d29241b74a0f28446f8cf1be0e8ec46d0847a61dadb2a4f096e8686d5f57fe5c72bcf386003f6520bc4b5856c32d63bf3efe7eb0bc0deefc9f68159e648'
54 '3194d1f8bff31b88a79657df83632b9224b66ca2cf8fd806a3ef35cf7a43f46c09c57f3dfd02256a99b6514a8f789b7d3bcfd7e17e00e34aa55ff0c6cedb5f01'
55 '5a1d78b5170da5abe3d18fdf9f2c3a4d78f15ba7d1ee9ec2708c4c9c2e28973469bc19386f70b3cf32ffafbe4fcc4303e5ebbd6d5187a1df3314ae0965b25e75'
56 '32580b82e97573d3e499821e2ce415ff134c0ec52c9b44a3c0862c4007d347f55636d6afac3dfc6831a9b384c7448075bdf3a12f369b4d8b62b24dfdb9c8a76a'
57 '03269a4822e86142b30165f3c3f72d2dcb1bfa16949f6a0379a0ce7b354269862a5a2d2e053b1690bda9fabc0e93c64ec9796c65d3d4b1b51dfc9dfa561e12a1'
58 '299dcc7094ce53474521356647bdd2fb069731c08d14a872a425412fcd72da840727a23664b12d95465bf313e8e8297da31259508d1c62cc2dcea596160e21c5'
59 'da7a97d5d3701c70dd5388b0440da39006ee4991ce174777931fea2aa8c90846a622b2b911f02ae4d5fffb92680d9a7e211c308f0f99c04896278e2ee0d9a4dc'
60 '0d6bc3d928cfafe4e4e0bc04dbb95c5d2b078573e4f9e0576e7f53a8fab08a7077202f575d74a3960248c4904b5f7f0661bf17dbe163c524ab51dd30e3cb80f7'
61 '2b50b25e8680878f7974fa9d519df7e141ca11c4bfe84a92a5d01bb193f034b1726ea05b3c0030bad1fbda8dbb78bf1dc7b73859053581b55ba813c39b27d9dc'
62 'a1661ab946c6cd7d3c6251a2a9fd68afe231db58ce33c92c42594aedb5629be8f299ba08a34713327b373a3badd1554a150343d8d3e5dfb102999c281bd49154'
63 '9426829605bbb9e65002437e02ed54e35c20fdf94706770a3dc1049da634147906d6b98bf7f5e7516c84068396a12c6feaf72f92b51bdf19715e0f64620319de'
64 'a436d3f5126c6c0d6b58c6865e7bd38dbfbfb7babe017eeecb5e9d162c21902cbf4e0a68cf3ac2f99815106f9fa003b075bd2b4eb5d16333fa913df6e2f3e32a'
65 '190112e38d5a5c0ca91b89cd58f95595262a551530a16546e1d84700fc9644aa2ca677953ffff655261e8a7bff6e6af4e431424df5f13c00bc90b77c421bc32d'
66 '51ebf20a1c93c2a86e8ced0d68e91f4a2bf6a537a2d674e05da69961d5861213159e28f228ffdc897bed721abd61ff133f49aeb0a9ebbbe76020c5b847c2a2df'
67 'a50d202a9c2e91a4450b45c227b295e1840cc99a5e545715d69c8af789ea3dd95a03a30f050d52855cabdc9183d4688c1b534eaa755ebe93616f9d192a855ee3'
68 '825b9dd0167c072ba62cabe0677e7cd20f2b4b850328022540f122689d8b25315005fa98ce867cf6e7460b2b26df16b88bb3b5c9ebf721746dce4e2271af7b97'
69 '717d93fb29034398394b68510f53da8d599cb68accf1cb92baee158fca1fde3fa5a1f698d35f81661b22c7acec6da34422b852e29dbc731b296a0884ffb6fcb0')
70
71pkgver() {
72 cd "$pkgbase-stable"
73 # Upstream versioning is incompatible with pacman's version comparisons, one
74 # way or another. So we replace dashes and tildes to make sure pacman's
75 # version comparing does the right thing for rc versions:
76 local _major=$(sed 's/~/./g' meson.version)
77 printf '%s.r%s.%s' "${_major}" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
78}
79
80prepare() {
81 cd "${pkgbase}-stable"
82
83 # Replace cdrom/dialout/tape groups with optical/uucp/storage
84 patch -Np1 -i ../0001-Use-Arch-Linux-device-access-groups.patch
85}
86
87build() {
88 local _timeservers=({0..3}.arch.pool.ntp.org)
89 local _nameservers=(
90 # We use these public name services, ordered by their privacy policy (hopefully):
91 # * Quad9 (https://quad9.net/privacy/policy/)
92 '9.9.9.9#dns.quad9.net'
93 '2620:fe::9#dns.quad9.net'
94 # * Cloudflare (https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver/)
95 '1.1.1.1#cloudflare-dns.com'
96 '2606:4700:4700::1111#cloudflare-dns.com'
97 # * Google (https://developers.google.com/speed/public-dns/privacy)
98 '8.8.8.8#dns.google'
99 '2001:4860:4860::8888#dns.google'
100 # You do not agree? Fine, change it in your local configuration.
101 )
102
103 local _meson_options=(
104 -Dversion-tag="${pkgver}-${pkgrel}-arch"
105 -Dvcs-tag=true
106 -Dshared-lib-tag="${pkgver}-${pkgrel}"
107 -Dmode=developer
108
109 -Dapparmor=enabled
110 -Dbootloader=enabled
111 -Dxenctrl=disabled
112 -Dbpf-framework=enabled
113 -Dima=false
114 -Dinstall-tests=true
115 -Dlibidn2=enabled
116 -Dlz4=enabled
117 -Dman=enabled
118 -Dselinux=disabled
119 -Dsshdprivsepdir=/usr/share/empty.sshd
120 -Dsysupdated=enabled
121 -Dvmlinux-h=provided
122 -Dvmlinux-h-path=/usr/src/linux/vmlinux.h
123
124 -Dcompat-sysv-interfaces=false
125 -Ddbuspolicydir=/usr/share/dbus-1/system.d
126 -Ddefault-dnssec=no
127 -Ddefault-kill-user-processes=false
128 -Ddefault-locale='C.UTF-8'
129 -Dlocalegen-path=/usr/bin/locale-gen
130 -Ddns-over-tls=openssl
131 -Dfallback-hostname='archlinux'
132 -Dnologin-path=/usr/bin/nologin
133 -Dntp-servers="${_timeservers[*]}"
134 -Ddns-servers="${_nameservers[*]}"
135 -Drpmmacrosdir=no
136
137 -Dsbat-distro='arch'
138 -Dsbat-distro-summary='Arch Linux AUR'
139 -Dsbat-distro-pkgname="${pkgname}"
140 -Dsbat-distro-version="${pkgver}"
141 -Dsbat-distro-url="https://aur.archlinux.org/pkgbase/${pkgname}"
142 )
143
144 arch-meson "${pkgbase}-stable" build "${_meson_options[@]}"
145
146 meson compile -C build
147}
148
149check() {
150 meson test -C build --print-errorlogs
151}
152
153package_systemd-git() {
154 pkgdesc='system and service manager'
155 pkgdesc+=' (git version)'
156 license+=(
157 'CC0-1.0' # siphash
158 'GPL-2.0-or-later' # udev
159 'MIT-0' # documentation and config files
160 )
161 # Not all libs are linked, but opened via dlopen() pointed out by 6511918 at
162 # https://aur.archlinux.org/pkgbase/systemd-git#comment-1041291
163 depends=(
164 "systemd-libs-git=${pkgver}"
165 'acl' 'libacl.so' 'bash' 'cryptsetup' 'libcryptsetup.so' 'dbus'
166 'dbus-units' 'glibc' 'kbd' 'kmod' 'hwdata'
167 'libgcrypt' 'libxcrypt' 'libcrypt.so' 'libidn2' 'lz4' 'pam'
168 'libelf' 'libgcc' 'libseccomp' 'libseccomp.so' 'util-linux' 'libblkid.so'
169 'libmount.so' 'xz' 'pcre2' 'audit' 'libaudit.so'
170 'openssl' 'libcrypto.so' 'libssl.so')
171 provides=('nss-myhostname' "systemd-tools=${pkgver}" "udev=${pkgver}")
172 provides+=("systemd=${pkgver}")
173 replaces=('nss-myhostname' 'systemd-tools' 'udev')
174 conflicts=('nss-myhostname' 'systemd-tools' 'udev')
175 conflicts+=('systemd')
176 optdepends=(
177 'apparmor: additional security features'
178 'curl: systemd-journal-upload, machinectl pull-tar and pull-raw'
179 'gnutls: systemd-journal-gatewayd and systemd-journal-remote'
180 'iptables: firewall features'
181 'libarchive: convert DDIs to tarballs'
182 'libbpf: support BPF programs'
183 'libfido2: unlocking LUKS2 volumes with FIDO2 token'
184 'libmicrohttpd: systemd-journal-gatewayd and systemd-journal-remote'
185 'libp11-kit: support PKCS#11'
186 'libpwquality: check password quality'
187 'polkit: allow administration as unprivileged user'
188 'qemu-base: systemd-vmspawn'
189 'qrencode: show QR codes'
190 'quota-tools: kernel-level quota management'
191 'systemd-sysvcompat: symlink package to provide sysvinit binaries'
192 "systemd-ukify-git=${pkgver}: combine kernel and initrd into a signed Unified Kernel Image"
193 'tpm2-tss: unlocking LUKS2 volumes with TPM2')
194 backup=(etc/systemd/coredump.conf
195 etc/systemd/homed.conf
196 etc/systemd/journald.conf
197 etc/systemd/journal-remote.conf
198 etc/systemd/journal-upload.conf
199 etc/systemd/logind.conf
200 etc/systemd/networkd.conf
201 etc/systemd/oomd.conf
202 etc/systemd/pstore.conf
203 etc/systemd/resolved.conf
204 etc/systemd/sleep.conf
205 etc/systemd/system.conf
206 etc/systemd/timesyncd.conf
207 etc/systemd/user.conf
208 etc/udev/iocost.conf
209 etc/udev/udev.conf)
210 install=systemd.install
211
212 meson install -C build --no-rebuild --destdir "${pkgdir}"
213
214 # runtime libraries shipped with systemd-libs
215 install -d -m0755 systemd-libs/lib/
216 mv "$pkgdir"/usr/lib/lib{nss,systemd,udev}*.so* systemd-libs/lib/
217 mv "$pkgdir"/usr/lib/pkgconfig systemd-libs/lib/pkgconfig
218 mv "$pkgdir"/usr/include systemd-libs/include
219 mv "$pkgdir"/usr/share/man/man3 systemd-libs/man3
220 install -d -m0755 systemd-libs/man8/
221 mv "$pkgdir"/usr/share/man/man8/*nss* systemd-libs/man8/
222
223 # ukify shipped in separate package
224 install -d -m0755 systemd-ukify/{bin,systemd,man1,install.d}
225 mv "$pkgdir"/usr/bin/ukify systemd-ukify/bin/
226 mv "$pkgdir"/usr/lib/systemd/ukify systemd-ukify/systemd/
227 mv "$pkgdir"/usr/share/man/man1/ukify.1 systemd-ukify/man1/
228 # we move the ukify hook itself, but keep 90-uki-copy.install in place,
229 # because there are other ways to generate UKIs w/o ukify, e.g. w/ mkinitcpio
230 mv "$pkgdir"/usr/lib/kernel/install.d/60-ukify.install systemd-ukify/install.d
231
232 # manpages shipped with systemd-sysvcompat
233 rm "$pkgdir"/usr/share/man/man1/init.1
234 rm "$pkgdir"/usr/share/man/man8/{halt,poweroff,reboot,shutdown}.8
235
236 # executable (symlinks) shipped with systemd-sysvcompat
237 rm "$pkgdir"/usr/bin/{halt,init,poweroff,reboot,shutdown}
238
239 # files shipped with systemd-resolvconf
240 rm "$pkgdir"/usr/{bin/resolvconf,share/man/man1/resolvconf.1}
241
242 # tests shipped with systemd-tests (for upstream)
243 install -d -m0755 systemd-tests/
244 mv "$pkgdir"/usr/lib/systemd/tests systemd-tests/
245
246 # avoid a potential conflict with [core]/filesystem
247 rm "$pkgdir"/usr/share/factory/etc/{issue,nsswitch.conf}
248 sed -i -e '/^C \/etc\/nsswitch\.conf/d' \
249 -e '/^C \/etc\/issue/d' "$pkgdir"/usr/lib/tmpfiles.d/etc.conf
250
251 # ship default policy to leave services disabled
252 echo 'disable *' >"$pkgdir"/usr/lib/systemd/system-preset/99-default.preset
253
254 # The group 'systemd-journal' is allocated dynamically and may have varying
255 # gid on different systems. Let's install with gid 0 (root), systemd-tmpfiles
256 # will fix the permissions for us. (see /usr/lib/tmpfiles.d/systemd.conf)
257 install -d -o root -g root -m 2755 "$pkgdir"/var/log/journal
258
259 # add example bootctl configuration
260 install -D -m0644 arch.conf "$pkgdir"/usr/share/systemd/bootctl/arch.conf
261 install -D -m0644 loader.conf "$pkgdir"/usr/share/systemd/bootctl/loader.conf
262 install -D -m0644 splash-arch.bmp "$pkgdir"/usr/share/systemd/bootctl/splash-arch.bmp
263
264 # pacman hooks
265 install -D -m0755 systemd-hook "$pkgdir"/usr/share/libalpm/scripts/systemd-hook
266 install -D -m0644 -t "$pkgdir"/usr/share/libalpm/hooks *.hook
267
268 # overwrite the systemd-user PAM configuration with our own
269 install -D -m0644 systemd-user.pam "$pkgdir"/usr/lib/pam.d/systemd-user
270
271 # create a directory for cryptsetup keys
272 install -d -m0700 "$pkgdir"/etc/cryptsetup-keys.d
273
274 # handle uncommon license
275 install -d -m0755 "$pkgdir/usr/share/licenses/$pkgbase"
276 ln -s -t "$_" /usr/share/doc/systemd/LICENSES/MIT-0.txt
277
278 # symlink kernel-install to installkernel
279 ln -s kernel-install "$pkgdir"/usr/bin/installkernel
280 ln -s kernel-install.8.gz "$pkgdir"/usr/share/man/man8/installkernel.8.gz
281}
282
283package_systemd-libs-git() {
284 pkgdesc='systemd client libraries'
285 pkgdesc+=' (git version)'
286 depends=('glibc' 'libgcc' 'libgcc_s.so' 'libgcrypt' 'lz4' 'xz' 'zstd')
287 license+=(
288 'CC0-1.0' # siphash
289 'GPL-2.0-or-later WITH Linux-syscall-note' # src/basic/linux/*
290 )
291 provides=('libsystemd' 'libsystemd.so' 'libudev.so')
292 provides+=("systemd-libs=${pkgver}")
293 conflicts=('libsystemd')
294 conflicts+=('systemd-libs')
295 replaces=('libsystemd')
296
297 install -d -m0755 "$pkgdir"/usr/share/man
298 mv systemd-libs/lib "$pkgdir"/usr/lib
299 mv systemd-libs/include "$pkgdir"/usr/include
300 mv systemd-libs/man3 "$pkgdir"/usr/share/man/man3
301 mv systemd-libs/man8 "$pkgdir"/usr/share/man/man8
302}
303
304package_systemd-resolvconf-git() {
305 pkgdesc='systemd resolvconf replacement (for use with systemd-resolved)'
306 pkgdesc+=' (git version)'
307 depends=("systemd-git=${pkgver}")
308 provides=('openresolv' 'resolvconf')
309 provides+=("systemd-resolvconf=${pkgver}")
310 conflicts=('resolvconf')
311 conflicts+=('systemd-resolvconf')
312
313 install -d -m0755 "$pkgdir"/usr/bin
314 ln -s resolvectl "$pkgdir"/usr/bin/resolvconf
315
316 install -d -m0755 "$pkgdir"/usr/share/man/man1
317 ln -s resolvectl.1.gz "$pkgdir"/usr/share/man/man1/resolvconf.1.gz
318}
319
320package_systemd-sysvcompat-git() {
321 pkgdesc='sysvinit compat for systemd'
322 pkgdesc+=' (git version)'
323 conflicts=('sysvinit')
324 conflicts+=('systemd-sysvcompat')
325 depends=("systemd-git=${pkgver}")
326 provides=("systemd-sysvcompat=${pkgver}")
327
328 install -D -m0644 -t "$pkgdir"/usr/share/man/man1 \
329 build/man/init.1
330 install -D -m0644 -t "$pkgdir"/usr/share/man/man8 \
331 build/man/{halt,poweroff,reboot,shutdown}.8
332
333 install -d -m0755 "$pkgdir"/usr/bin
334 ln -s ../lib/systemd/systemd "$pkgdir"/usr/bin/init
335 for tool in halt poweroff reboot shutdown; do
336 ln -s systemctl "$pkgdir"/usr/bin/$tool
337 done
338}
339
340package_systemd-tests-git() {
341 pkgdesc='systemd tests'
342 pkgdesc+=' (git version)'
343 conflicts=('systemd-tests')
344 provides=("systemd-tests=${pkgver}")
345 depends=(
346 'bash'
347 'glibc'
348 'libgcc'
349 'python'
350 'python-packaging'
351 'python-colorama'
352 'python-pexpect'
353 'python-pytest'
354 'python-psutil'
355 "systemd=${pkgver}",
356 "systemd-libs=${pkgver}")
357
358 install -d -m0755 "$pkgdir"/usr/lib/systemd
359 mv systemd-tests/tests "$pkgdir"/usr/lib/systemd/tests
360}
361
362package_systemd-ukify-git() {
363 pkgdesc='Combine kernel and initrd into a signed Unified Kernel Image'
364 pkgdesc+=' (git version)'
365 conflicts=('systemd-ukify')
366 provides=('ukify')
367 provides+=("systemd-ukify=$pkgver")
368 depends=("systemd-git=${pkgver}" 'binutils' 'python-cryptography' 'python' 'python-pefile')
369 optdepends=('python-pillow: Show the size of splash image'
370 'sbsigntools: Sign the embedded kernel')
371
372 install -d -m0755 "$pkgdir"/usr/{lib/kernel,share/man}
373 mv systemd-ukify/bin "$pkgdir"/usr/bin
374 mv systemd-ukify/systemd "$pkgdir"/usr/lib/systemd
375 mv systemd-ukify/man1 "$pkgdir"/usr/share/man/man1
376 mv systemd-ukify/install.d "$pkgdir"/usr/lib/kernel/install.d
377}
378
379# vim:ft=sh syn=sh et sw=2:
380

Changes since previous scan

--- PKGBUILD @ 2026-07-16 00:05
+++ PKGBUILD @ 2026-10-26 13:45
@@ -10,7 +10,7 @@
'systemd-tests-git'
'systemd-ukify-git')
pkgdesc='systemd (git version)'
-pkgver=262.devel.r90669.afff448cf47
+pkgver=263.devel.r92904.80f70d2af65
pkgrel=1
arch=('x86_64')
license=('LGPL-2.1-or-later')
@@ -22,7 +22,8 @@
'meson' 'libseccomp' 'pcre2' 'audit' 'kexec-tools' 'libxkbcommon'
'bash-completion' 'p11-kit' 'systemd' 'libfido2' 'tpm2-tss' 'rsync'
'bpf' 'libbpf' 'clang' 'llvm' 'curl' 'gnutls' 'python-pyelftools'
- 'libpwquality' 'qrencode' 'lib32-gcc-libs' 'python-pefile' 'linux-headers')
+ 'libpwquality' 'qrencode' 'lib32-gcc-libs' 'python-pefile' 'linux-headers'
+ 'rust' 'rust-bindgen')
conflicts=("mkinitcpio<38-1")
options=('!strip')
source=("$pkgbase-stable::git+https://github.com/systemd/systemd"
@@ -45,7 +46,8 @@
'30-systemd-daemon-reload-user.hook'
'35-systemd-enqueue-marked.hook'
'35-systemd-udev-reload.hook'
- '35-systemd-update.hook')
+ '35-systemd-update.hook'
+ '36-systemd-modules-load.hook')
sha512sums=('SKIP'
'ddb9401e47d0bf01874f255803a4b2167ec631484189d29d03694101fd9c77724e735f16d99c5f4ffd8061ae78839b2826ff0e0a925a6f0dbca25f2cfb271a82'
'61032d29241b74a0f28446f8cf1be0e8ec46d0847a61dadb2a4f096e8686d5f57fe5c72bcf386003f6520bc4b5856c32d63bf3efe7eb0bc0deefc9f68159e648'
@@ -63,7 +65,8 @@
'190112e38d5a5c0ca91b89cd58f95595262a551530a16546e1d84700fc9644aa2ca677953ffff655261e8a7bff6e6af4e431424df5f13c00bc90b77c421bc32d'
'51ebf20a1c93c2a86e8ced0d68e91f4a2bf6a537a2d674e05da69961d5861213159e28f228ffdc897bed721abd61ff133f49aeb0a9ebbbe76020c5b847c2a2df'
'a50d202a9c2e91a4450b45c227b295e1840cc99a5e545715d69c8af789ea3dd95a03a30f050d52855cabdc9183d4688c1b534eaa755ebe93616f9d192a855ee3'
- '825b9dd0167c072ba62cabe0677e7cd20f2b4b850328022540f122689d8b25315005fa98ce867cf6e7460b2b26df16b88bb3b5c9ebf721746dce4e2271af7b97')
+ '825b9dd0167c072ba62cabe0677e7cd20f2b4b850328022540f122689d8b25315005fa98ce867cf6e7460b2b26df16b88bb3b5c9ebf721746dce4e2271af7b97'
+ '717d93fb29034398394b68510f53da8d599cb68accf1cb92baee158fca1fde3fa5a1f698d35f81661b22c7acec6da34422b852e29dbc731b296a0884ffb6fcb0')
pkgver() {
cd "$pkgbase-stable"
@@ -160,9 +163,9 @@
depends=(
"systemd-libs-git=${pkgver}"
'acl' 'libacl.so' 'bash' 'cryptsetup' 'libcryptsetup.so' 'dbus'
- 'dbus-units' 'kbd' 'kmod' 'hwdata'
+ 'dbus-units' 'glibc' 'kbd' 'kmod' 'hwdata'
'libgcrypt' 'libxcrypt' 'libcrypt.so' 'libidn2' 'lz4' 'pam'
- 'libelf' 'libseccomp' 'libseccomp.so' 'util-linux' 'libblkid.so'
+ 'libelf' 'libgcc' 'libseccomp' 'libseccomp.so' 'util-linux' 'libblkid.so'
'libmount.so' 'xz' 'pcre2' 'audit' 'libaudit.so'
'openssl' 'libcrypto.so' 'libssl.so')
provides=('nss-myhostname' "systemd-tools=${pkgver}" "udev=${pkgver}")
@@ -339,7 +342,18 @@
pkgdesc+=' (git version)'
conflicts=('systemd-tests')
provides=("systemd-tests=${pkgver}")
- depends=("systemd=${pkgver}")
+ depends=(
+ 'bash'
+ 'glibc'
+ 'libgcc'
+ 'python'
+ 'python-packaging'
+ 'python-colorama'
+ 'python-pexpect'
+ 'python-pytest'
+ 'python-psutil'
+ "systemd=${pkgver}",
+ "systemd-libs=${pkgver}")
install -d -m0755 "$pkgdir"/usr/lib/systemd
mv systemd-tests/tests "$pkgdir"/usr/lib/systemd/tests
@@ -351,7 +365,7 @@
conflicts=('systemd-ukify')
provides=('ukify')
provides+=("systemd-ukify=$pkgver")
- depends=("systemd-git=${pkgver}" 'binutils' 'python-cryptography' 'python-pefile')
+ depends=("systemd-git=${pkgver}" 'binutils' 'python-cryptography' 'python' 'python-pefile')
optdepends=('python-pillow: Show the size of splash image'
'sbsigntools: Sign the embedded kernel')

Scan history

Scanned at (UTC)SeverityRules
2026-10-26 13:45:05 Medium 1
2026-07-16 00:05:41 Clean 2
2026-07-15 19:49:33 Medium 1
2026-06-18 16:11:54 Clean 0

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion