v2ray-rs-bin

MEDIUM

maintainer zhukva 0 votes scanned 2026-08-27 13:34:24.141616

View on AUR

Why flagged

Installs a prebuilt binary (v2ray-rs-run) with setuid-root (mode 4755/4750) from a low-vote personal GitHub repo; the .install hook also grants cap_net_admin to another helper and creates system users/groups — legitimate for a TUN proxy tool but the combination of an unverified prebuilt executable with elevated privileges from a low-popularity source warrants medium concern.

Triggered rules

Medium Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

.install:15 chmod 4750 /usr/bin/v2ray-rs-run 2>/dev/null || true

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 72%): Installs a prebuilt binary (v2ray-rs-run) with setuid-root (mode 4755/4750) from a low-vote personal GitHub repo; the .install hook also grants cap_net_admin to another helper and creates system users/groups — legitimate for a TUN proxy tool but the combination of an unverified prebuilt executable with elevated privileges from a low-popularity source warrants medium concern.

PKGBUILD

      1pkgname=v2ray-rs-bin
    
      2_pkgname=v2ray-rs
    
      3pkgver=0.17.2
    
      4pkgrel=1
    
      5pkgdesc="Linux desktop GUI for v2ray/xray/sing-box proxy management (prebuilt)"
    
      6arch=('x86_64')
    
      7url="https://github.com/victorzhuk/v2ray-rs"
    
      8license=('Apache-2.0')
    
      9depends=('gtk4' 'libadwaita' 'dbus' 'libcap')
    
      10provides=("$_pkgname=$pkgver")
    
      11conflicts=("$_pkgname")
    
      12optdepends=(
    
      13    'v2ray: V2Ray proxy backend'
    
      14    'xray: Xray proxy backend'
    
      15    'sing-box: sing-box proxy backend'
    
      16    'polkit: one-time TUN privilege grant via pkexec'
    
      17)
    
      18install=v2ray-rs.install
    
      19source=("$pkgname-$pkgver.tar.gz::$url/releases/download/v$pkgver/v2ray-rs-$CARCH-linux.tar.gz")
    
      20sha256sums=('3020fce7410911bbf33c80a59053609e37d3464e1c8e4870d9ea0970b954c681')
    
      21
    
      22package() {
    
      23    cd "$_pkgname-$pkgver-$CARCH-linux"
    
      24
    
      25    install -Dm755 "bin/v2ray-rs" "$pkgdir/usr/bin/v2ray-rs"
    
      26    # Privileged TUN helpers. The install hook creates the `v2ray-rs` group,
    
      27    # restricts these to it (netctl 0750 + cap_net_admin, run 4750 setuid), and
    
      28    # creates the bypass user. Modes here are the pre-hook defaults.
    
      29    install -Dm755 "bin/v2ray-rs-netctl" "$pkgdir/usr/bin/v2ray-rs-netctl"
    
      30    install -Dm4755 "bin/v2ray-rs-run" "$pkgdir/usr/bin/v2ray-rs-run"
    
      31
    
      32    install -Dm644 "share/applications/com.github.v2ray-rs.desktop" \
    
      33        "$pkgdir/usr/share/applications/com.github.v2ray-rs.desktop"
    
      34    install -Dm644 "share/icons/hicolor/scalable/apps/com.github.v2ray-rs.svg" \
    
      35        "$pkgdir/usr/share/icons/hicolor/scalable/apps/com.github.v2ray-rs.svg"
    
      36    install -Dm644 "share/icons/hicolor/symbolic/apps/com.github.v2ray-rs-symbolic.svg" \
    
      37        "$pkgdir/usr/share/icons/hicolor/symbolic/apps/com.github.v2ray-rs-symbolic.svg"
    
      38    install -Dm644 "share/icons/hicolor/256x256/apps/com.github.v2ray-rs.png" \
    
      39        "$pkgdir/usr/share/icons/hicolor/256x256/apps/com.github.v2ray-rs.png"
    
      40
    
      41    local lang
    
      42    for lang in en_US ru_RU; do
    
      43        install -Dm644 "share/locale/$lang/LC_MESSAGES/v2ray-rs.mo" \
    
      44            "$pkgdir/usr/share/locale/$lang/LC_MESSAGES/v2ray-rs.mo"
    
      45    done
    
      46
    
      47    install -Dm644 "LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      48}
    
      49

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-27 13:34:24	Medium	3
2026-08-27 13:32:42	Medium	2