vmware-workstation

maintainer JulianXhokaxhiu · 247 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The primary concern is the VMware Workstation installer bundle being sourced from archive.org rather than from VMware/Broadcom's official distribution servers. While archive.org is a legitimate archival service, it is not an official vendor distribution channel for VMware software. The bundle is a large executable that is run directly via bash in the prepare() function, meaning any substitution or tampering of that archive.org-hosted file would result in arbitrary code execution during the build. The sha256sum check provides some protection, but the source of truth for that hash is the PKGBUILD itself (not an official vendor-signed manifest), so if the archive.org file were swapped and the PKGBUILD updated simultaneously, there would be no independent verification. All other sources (ISO images, patches, config files) come from packages-prod.broadcom.com which is the official Broadcom/VMware distribution host. The archive.org hosting of the main installer bundle is a genuine supply-chain concern: it is not the official vendor host, the file is executed, and there is no GPG signature verification. This is a real medium-severity supply-chain risk, not a false positive.

Triggered rules

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:62 "VMware-Workstation-Full-${pkgver}-${_buildver}.${CARCH}.bundle::https://archive.org/download/VMware-Workstation-Full-${pkgver}-${_buildver}.${CARCH}/VMware-Workstation-Full-${pkgver}-${_buildver}.${CARCH}.bundle"
PKGBUILD:64 "https://packages-prod.broadcom.com/tools/frozen/linux/linux.iso"

MEDIUM Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

PKGBUILD:319 chmod +s \

MEDIUM AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (anthropic/claude-4.6-sonnet-20260217) reviewed it and judged it MEDIUM (confidence 82%): The primary concern is the VMware Workstation installer bundle being sourced from archive.org rather than from VMware/Broadcom's official distribution servers. While archive.org is a legitimate archival service, it is not an official vendor distribution channel for VMware software. The bundle is a large executable that is run directly via bash in the prepare() function, meaning any substitution or tampering of that archive.org-hosted file would result in arbitrary code execution during the build. The sha256sum check provides some protection, but the source of truth for that hash is the PKGBUILD itself (not an official vendor-signed manifest), so if the archive.org file were swapped and the PKGBUILD updated simultaneously, there would be no independent verification. All other sources (ISO images, patches, config files) come from packages-prod.broadcom.com which is the official Broadcom/VMware distribution host. The archive.org hosting of the main installer bundle is a genuine supply-chain concern: it is not the official vendor host, the file is executed, and there is no GPG signature verification. This is a real medium-severity supply-chain risk, not a false positive.

PKGBUILD

3 offending line(s) highlighted

      1# Maintainer: Julian Xhokaxhiu <https://julianxhokaxhiu.com>
    
      2# Contributor: Jean-Marc Lenoir <archlinux "at" jihemel "dot" com>
    
      3# Contributor: Maxwell Pray a.k.a. Synthead <synthead@gmail.com>
    
      4
    
      5# To enable macOS guests support, uncomment the line below:
    
      6#_enable_macOS_guests=y
    
      7# CAUTION: Running macOS on VMware Workstation on non Apple computer is forbidden by
    
      8# Apple and VMware EULAs.
    
      9
    
      10# vmware-keymaps dependency is needed to avoid some conflicts when you install
    
      11# this package with vmware-horizon-client. If you don't plan to install
    
      12# vmware-horizon-client and don't want to add this dependency, you can
    
      13# uncomment the line below:
    
      14#_remove_vmware_keymaps_dependency=y
    
      15
    
      16#PKGEXT=.pkg.tar
    
      17pkgname=vmware-workstation
    
      18pkgver=26H1
    
      19_buildver=25388281
    
      20_pkgver=${pkgver}_${_buildver}
    
      21pkgrel=3
    
      22pkgdesc='The industry standard for running multiple operating systems as virtual machines on a single Linux PC.'
    
      23arch=(x86_64)
    
      24url='https://www.vmware.com/products/workstation-for-linux.html'
    
      25license=(custom)
    
      26install="vmware-workstation.install"
    
      27conflicts=(
    
      28  vmware-modules-dkms
    
      29  vmware-ovftool
    
      30  vmware-patch
    
      31  vmware-systemd-services
    
      32)
    
      33provides=(
    
      34  vmware-ovftool
    
      35)
    
      36depends=(
    
      37  dkms
    
      38  fuse2
    
      39  gtkmm3
    
      40  libcanberra
    
      41  libaio
    
      42  pcsclite
    
      43  hicolor-icon-theme
    
      44  libxcrypt-compat # needed for ovftool
    
      45  libxml2-legacy # needed for vmrun
    
      46  # needed to use Arch GTK3 library (for theme integration)
    
      47  gtk3
    
      48  gcr
    
      49)
    
      50optdepends=(
    
      51  'linux-headers: build modules against Arch kernel'
    
      52)
    
      53makedepends=(
    
      54  sqlite
    
      55)
    
      56backup=(
    
      57  'etc/vmware/config'
    
      58  'etc/conf.d/vmware'
    
      59)
    
      60
    
      61source=(
    
      62  "VMware-Workstation-Full-${pkgver}-${_buildver}.${CARCH}.bundle::https://archive.org/download/VMware-Workstation-Full-${pkgver}-${_buildver}.${CARCH}/VMware-Workstation-Full-${pkgver}-${_buildver}.${CARCH}.bundle"
    
      63
    
      64  "https://packages-prod.broadcom.com/tools/frozen/linux/linux.iso"
    
      65  "https://packages-prod.broadcom.com/tools/frozen/linux/linuxPreGlibc25.iso"
    
      66  "https://packages-prod.broadcom.com/tools/frozen/netware/netware.iso"
    
      67  "https://packages-prod.broadcom.com/tools/frozen/solaris/solaris.iso"
    
      68  "https://packages-prod.broadcom.com/tools/frozen/windows/winPre2k.iso"
    
      69  "https://packages-prod.broadcom.com/tools/frozen/windows/winPreVista.iso"
    
      70
    
      71  "winVistaSP1.iso::https://packages-prod.broadcom.com/tools/frozen/windows/WindowsToolsVista/SP1/windows.iso"
    
      72  "winVistaSP2.iso::https://packages-prod.broadcom.com/tools/frozen/windows/WindowsToolsVista/SP2/windows.iso"
    
      73
    
      74  'vmware-bootstrap'
    
      75  'vmware-vix-bootstrap'
    
      76  'config'
    
      77  'configure-initscript.sh'
    
      78  'vmware-environment.sh'
    
      79
    
      80  'vmware-networks-configuration.service'
    
      81  'vmware-networks.service'
    
      82  'vmware-usbarbitrator.service'
    
      83  'vmware-networks.path'
    
      84  'vmware-usbarbitrator.path'
    
      85
    
      86  'dkms.conf.in'
    
      87  'Makefile'
    
      88  'vmmon.patch'
    
      89  'vmnet.patch'
    
      90)
    
      91sha256sums=('3f6d2501e654dbc7701a8290ff6ffcfba6c5444cd5f35f4933cd08c9499f6d84'
    
      92            '4e66b286b743d9cf788c487295b1dec3c6071d657674f650aadc23e8900758ff'
    
      93            'aef8f747bd9a6e84d139c57b8c1f8e87c83a9b9df69cd09602030190fec21973'
    
      94            '2c89993d811f5d90f7b0e2a286e9339907055e51ecb16f25509e5c4517326487'
    
      95            '4666b0adfec6636ecda60bfab889cbf28f06f77526442628a70789fd76823e70'
    
      96            'a17a11d65f841d213ffc2d6681acdf849c380e77055334c7a8127c1373991ebb'
    
      97            'aab73d3ef4668beec725541c08c41042bb22fc86cd5563310fc170b952631d8a'
    
      98            '3b8f9d6e43f5d1dff0576cb93d008c14e0434d7233872f6c63988513d2bda5d1'
    
      99            '8f1cc3181055891b98672f715e0ca7bbe4018960eae945d7a4b9f640c44c3d79'
    
      100            '12e7b16abf8d7e858532edabb8868919c678063c566a6535855b194aac72d55e'
    
      101            'da1698bf4e73ae466c1c7fc93891eba4b9c4581856649635e6532275dbfea141'
    
      102            'ac81b0470feebba36482fbb2a9f641fef98924711bf761c0e6fdec67178194de'
    
      103            '48d203450db426e8780f3696a2cf85ee08db004e93f8aca50a9aa24129b1e839'
    
      104            'b94959a11b28e51b541321be0588190eb10825e9ff55cbd16eb01483a839a69f'
    
      105            '9b4fbe0ba83f761a2eb9ecd05d48428f8b0a5b3abd8404ccbd928408e682f02b'
    
      106            'c0a5aea785db06921fb350d36d5e0fd9a14f5eee0c835686ec6fea1af8c92245'
    
      107            'd7a9fbf39a0345ae2f14f7f389f30b1110f605d187e0c241e99bbb18993c250d'
    
      108            '16a73931894a65d43da489ff25d07647c0ecddf60d443b103bceca63504910fe'
    
      109            'fe1b1be8297f4170406f97dd1f8b385d911faf45afe19cbc0c26b8092b3ddf8d'
    
      110            '7ba8cbdb1981a9a714b4068e651cc7a20ab358dddf6cab68519d9f324ea800b3'
    
      111            '273d4357599a3e54259c78cc49054fef8ecfd2c2eda35cbcde3a53a62777a5ac'
    
      112            '16f0780792cd66f580a0a872679cac76f8df936a0f2d90ac2d014902d46da58c'
    
      113            'cefe79e418a7403bc0a788b1ca695a9463d6c2d9ecbf1ce15125e39e39391c2b')
    
      114options=(!strip emptydirs !debug)
    
      115
    
      116if [ -z "$_remove_vmware_keymaps_dependency" ]; then
    
      117depends+=(
    
      118  vmware-keymaps
    
      119)
    
      120fi
    
      121
    
      122_extractedimages=(windows)
    
      123_isoimages=(linux linuxPreGlibc25 netware solaris winPre2k winPreVista winVistaSP1 winVistaSP2)
    
      124
    
      125if [ -n "$_enable_macOS_guests" ]; then
    
      126
    
      127_vmware_fusion_ver=13.5.2
    
      128_vmware_fusion_buildver=23775688
    
      129_vmware_fusion_ver_full=${_vmware_fusion_ver}_${_vmware_fusion_buildver}
    
      130# List of VMware Fusion versions: https://softwareupdate-prod.broadcom.com/cds/vmw-desktop/fusion/index.html
    
      131
    
      132makedepends+=(
    
      133  python
    
      134  7zip
    
      135  uefitool
    
      136)
    
      137
    
      138source+=(
    
      139  "https://packages-prod.broadcom.com/tools/frozen/darwin/darwin.iso"
    
      140  "https://packages-prod.broadcom.com/tools/frozen/darwin/darwinPre15.iso"
    
      141  "unlocker.py"
    
      142  "efi-patches.txt"
    
      143)
    
      144
    
      145sha256sums+=(
    
      146  'e0c96286f376b30e2c2362bd991709f0f6bc6ebd911be4056a58da8698c49236'
    
      147  'ef33fc5d152fd9db27cac0b1f21160226dfa5e5b7a501ffa25818682f3b4aaa0'
    
      148  '8a61e03d0edbbf60c1c84a43aa87a6e950f82d2c71b968888f019345c2f684f3'
    
      149  '392c1effcdec516000e9f8ffc97f2586524d8953d3e7d6f2c5f93f2acd809d91'
    
      150)
    
      151
    
      152_fusion_isoimages=(darwin darwinPre15)
    
      153fi
    
      154
    
      155
    
      156_create_database_file() {
    
      157  # Create a database which contains the list of guest tools (necessary to avoid that vmware try to download them)
    
      158  local database_filename="$pkgdir/etc/vmware-installer/database"
    
      159  echo -n "" > "$database_filename"
    
      160
    
      161  sqlite3 "$database_filename" "CREATE TABLE settings(key VARCHAR PRIMARY KEY, value VARCHAR NOT NULL, component_name VARCHAR NOT NULL);"
    
      162  sqlite3 "$database_filename" "INSERT INTO settings(key,value,component_name) VALUES('db.schemaVersion','2','vmware-installer');"
    
      163  sqlite3 "$database_filename" "CREATE TABLE components(id INTEGER PRIMARY KEY, name VARCHAR NOT NULL, version VARCHAR NOT NULL, buildNumber INTEGER NOT NULL, component_core_id INTEGER NOT NULL, longName VARCHAR NOT NULL, description VARCHAR, type INTEGER NOT NULL);"
    
      164
    
      165  for isoimage in ${_extractedimages[@]}
    
      166  do
    
      167    local version=$(cat "$srcdir/extracted/vmware-tools-$isoimage/manifest.xml" | grep -oPm1 "(?<=<version>)[^<]+")
    
      168    sqlite3 "$database_filename" "INSERT INTO components(name,version,buildNumber,component_core_id,longName,description,type) VALUES('vmware-tools-$isoimage','$version',${_pkgver#*_},1,'$isoimage','$isoimage',1);"
    
      169  done
    
      170
    
      171  for isoimage in ${_isoimages[@]}
    
      172  do
    
      173	  sqlite3 "$database_filename" "INSERT INTO components(name,version,buildNumber,component_core_id,longName,description,type) VALUES('vmware-tools-$isoimage','1',${_pkgver#*_},1,'$isoimage','$isoimage',1);"
    
      174  done
    
      175
    
      176if [ -n "$_enable_macOS_guests" ]; then
    
      177  for isoimage in ${_fusion_isoimages[@]}
    
      178  do
    
      179	  sqlite3 "$database_filename" "INSERT INTO components(name,version,buildNumber,component_core_id,longName,description,type) VALUES('vmware-tools-$isoimage','1',${_vmware_fusion_ver_full#*_},1,'$isoimage','$isoimage',1);"
    
      180  done
    
      181fi
    
      182}
    
      183
    
      184prepare() {
    
      185  extracted_dir="$srcdir/extracted"
    
      186  [[ -d "$extracted_dir" ]] && rm -r "$extracted_dir"
    
      187
    
      188  bash \
    
      189    "$(readlink -f "$srcdir/VMware-Workstation-Full-${_pkgver/_/-}.${CARCH}.bundle")" \
    
      190    --extract "$extracted_dir"
    
      191
    
      192if [ -n "$_enable_macOS_guests" ]; then
    
      193  sed -i -e "s|/usr/lib/vmware/|${pkgdir}/usr/lib/vmware/|" "$srcdir/unlocker.py"
    
      194fi
    
      195}
    
      196
    
      197package() {
    
      198  local vmware_installer_version=$(cat "$srcdir/extracted/vmware-installer/manifest.xml" | grep -oPm1 "(?<=<version>)[^<]+")
    
      199
    
      200  # Make directories and copy files.
    
      201
    
      202  mkdir -p \
    
      203    "$pkgdir/etc"/{pam.d,modprobe.d,vmware} \
    
      204    "$pkgdir/usr"/{share,bin} \
    
      205    "$pkgdir/usr/include/vmware-vix" \
    
      206    "$pkgdir/usr/lib"/{vmware/setup,vmware-vix,vmware-ovftool,vmware-installer/"$vmware_installer_version",modules-load.d} \
    
      207    "$pkgdir/usr/share"/{doc/vmware-vix,licenses/"$pkgname"} \
    
      208    "$pkgdir/var/lib/vmware/Shared VMs"
    
      209
    
      210  cd "$srcdir/extracted"
    
      211
    
      212  cp -r \
    
      213    vmware-workstation/share/* \
    
      214    vmware-workstation/man \
    
      215    vmware-network-editor-ui/share/* \
    
      216    vmware-other-apps/share/* \
    
      217    "$pkgdir/usr/share"
    
      218
    
      219  cp -r \
    
      220    vmware-workstation/bin/* \
    
      221    vmware-vmx/{,s}bin/* \
    
      222    vmware-vix-core/bin/* \
    
      223    vmware-vprobe/bin/* \
    
      224    "$pkgdir/usr/bin"
    
      225
    
      226  cp -r \
    
      227    vmware-workstation/lib/* \
    
      228    vmware-other-apps/lib/* \
    
      229    vmware-vmx/{lib/*,roms} \
    
      230    vmware-vprobe/lib/* \
    
      231    vmware-usbarbitrator/bin \
    
      232    vmware-network-editor/lib \
    
      233    "$pkgdir/usr/lib/vmware"
    
      234
    
      235  cp -r \
    
      236    vmware-player-setup/vmware-config \
    
      237    "$pkgdir/usr/lib/vmware/setup"
    
      238
    
      239  cp -r \
    
      240    vmware-vix-lib-Workstation1700/lib/Workstation-17.0.0 \
    
      241    vmware-vix-core/{lib/*,vixwrapper-config.txt} \
    
      242    "$pkgdir/usr/lib/vmware-vix"
    
      243
    
      244  cp -r \
    
      245    vmware-vix-core/doc/* \
    
      246    "$pkgdir/usr/share/doc/vmware-vix"
    
      247
    
      248  cp -r \
    
      249    vmware-ovftool/* \
    
      250    "$pkgdir/usr/lib/vmware-ovftool"
    
      251
    
      252  cp -r \
    
      253    vmware-installer/{python,sopython,vmis,vmis-launcher,vmware-installer,vmware-installer.py} \
    
      254    "$pkgdir/usr/lib/vmware-installer/$vmware_installer_version"
    
      255
    
      256  cp -r \
    
      257    vmware-vix-core/include/* \
    
      258    "$pkgdir/usr/include/vmware-vix"
    
      259
    
      260  for isoimage in ${_extractedimages[@]}
    
      261  do
    
      262    install -Dm 644 "vmware-tools-$isoimage/$isoimage.iso" "$pkgdir/usr/lib/vmware/isoimages/$isoimage.iso"
    
      263  done
    
      264
    
      265  for isoimage in ${_isoimages[@]}
    
      266  do
    
      267    install -Dm 644 "$srcdir/$isoimage.iso" "$pkgdir/usr/lib/vmware/isoimages/$isoimage.iso"
    
      268  done
    
      269
    
      270  install -Dm 644 "vmware-workstation/doc/EULA" "$pkgdir/usr/share/doc/vmware-workstation/EULA"
    
      271  ln -s "/usr/share/doc/vmware-workstation/EULA" "$pkgdir/usr/share/licenses/$pkgname/VMware Workstation - EULA.txt"
    
      272  ln -s "/usr/lib/vmware-ovftool/vmware.eula" "$pkgdir/usr/share/licenses/$pkgname/VMware OVF Tool - EULA.txt"
    
      273  install -Dm 644 "vmware-workstation/doc"/open_source_licenses.txt "$pkgdir/usr/share/licenses/$pkgname/VMware Workstation open source license.txt"
    
      274  install -Dm 644 "vmware-workstation/doc"/ovftool_open_source_licenses.txt "$pkgdir/usr/share/licenses/$pkgname/VMware OVF Tool open source license.txt"
    
      275  install -Dm 644 "vmware-vix-core"/open_source_licenses.txt "$pkgdir/usr/share/licenses/$pkgname/VMware VIX open source license.txt"
    
      276  rm "$pkgdir/usr/lib/vmware-ovftool"/{vmware-eula.rtf,open_source_licenses.txt,manifest.xml}
    
      277
    
      278  install -d -m 755 "$pkgdir/usr/lib/vmware-installer/$vmware_installer_version"/{lib/lib,artwork}
    
      279  install -Dm 755 "$srcdir/configure-initscript.sh" "$pkgdir/usr/lib/vmware-installer/$vmware_installer_version/bin/configure-initscript.sh"
    
      280
    
      281  install -Dm 644 "vmware-vmx/etc/modprobe.d/modprobe-vmware-fuse.conf" "$pkgdir/etc/modprobe.d/vmware-fuse.conf"
    
      282
    
      283  install -Dm 644 vmware-vmx/extra/modules.xml "$pkgdir"/usr/lib/vmware/modules/modules.xml
    
      284  install -Dm 644 vmware-installer/bootstrap "$pkgdir"/etc/vmware-installer/bootstrap
    
      285  install -Dm 644 "$srcdir"/vmware-vix-bootstrap "$pkgdir"/etc/vmware-vix/bootstrap
    
      286  install -Dm 644 "$srcdir"/vmware-bootstrap "$pkgdir"/etc/vmware/bootstrap
    
      287  install -Dm 644 "$srcdir"/config "$pkgdir"/etc/vmware/config
    
      288
    
      289if [ -z "$_remove_vmware_keymaps_dependency" ]; then
    
      290  rm -r "$pkgdir/usr/lib/vmware/xkeymap" # these files are provided by vmware-keymaps package
    
      291fi
    
      292
    
      293  echo -e "vmw_vmci\nvmmon" > "$pkgdir/usr/lib/modules-load.d/vmware.conf"
    
      294
    
      295  for service_file in \
    
      296    vmware-networks-configuration.service \
    
      297    vmware-networks.service \
    
      298    vmware-usbarbitrator.service \
    
      299    vmware-networks.path \
    
      300    vmware-usbarbitrator.path
    
      301  do
    
      302    install -Dm 644 \
    
      303      "$srcdir/$service_file" \
    
      304      "$pkgdir/usr/lib/systemd/system/$service_file"
    
      305  done
    
      306
    
      307
    
      308  # Apply permissions where necessary.
    
      309
    
      310  chmod +x \
    
      311    "$pkgdir/usr/bin"/* \
    
      312    "$pkgdir/usr/lib/vmware/bin"/* \
    
      313    "$pkgdir/usr/lib/vmware/setup"/* \
    
      314    "$pkgdir/usr/lib/vmware/lib"/libvmware-gksu.so/gksu-run-helper \
    
      315    "$pkgdir/usr/lib/vmware-ovftool"/{ovftool,ovftool.bin} \
    
      316    "$pkgdir/usr/lib/vmware-installer/$vmware_installer_version"/{vmware-installer,vmis-launcher} \
    
      317    "$pkgdir/usr/lib/vmware-vix/setup"/*
    
      318
    
      319  chmod +s \
    
      320    "$pkgdir/usr/bin"/vmware-authd \
    
      321    "$pkgdir/usr/lib/vmware/bin"/{vmware-vmx,vmware-vmx-debug,vmware-vmx-stats}
    
      322
    
      323
    
      324  # Add symlinks the installer would create.
    
      325
    
      326  for link in \
    
      327    licenseTool \
    
      328    vmware \
    
      329    vmware-app-control \
    
      330    vmware-enter-serial \
    
      331    vmware-fuseUI \
    
      332    vmware-gksu \
    
      333    vmware-modconfig \
    
      334    vmware-modconfig-console \
    
      335    vmware-mount \
    
      336    vmware-netcfg \
    
      337    vmware-setup-helper \
    
      338    vmware-tray \
    
      339    vmware-vmblock-fuse \
    
      340    vmware-vprobe \
    
      341    vmware-zenity
    
      342  do
    
      343    ln -s /usr/lib/vmware/bin/appLoader "$pkgdir/usr/lib/vmware/bin/$link"
    
      344  done
    
      345
    
      346  for link in \
    
      347    vmrest
    
      348  do
    
      349    ln -s /usr/lib/vmware/bin/appLoader "$pkgdir/usr/bin/$link"
    
      350  done
    
      351
    
      352  for link in \
    
      353    vmware-fuseUI \
    
      354    vmware-mount \
    
      355    vmware-netcfg \
    
      356    vmware-usbarbitrator
    
      357  do
    
      358    ln -s /usr/lib/vmware/bin/$link "$pkgdir/usr/bin/$link"
    
      359  done
    
      360
    
      361  ln -s /usr/lib/vmware/icu "$pkgdir/etc/vmware/icu"
    
      362  ln -s /usr/lib/vmware-ovftool/ovftool "$pkgdir/usr/bin/ovftool"
    
      363  ln -s /usr/lib/vmware-vix/libvixAllProducts.so "$pkgdir/usr/lib/libvixAllProducts.so"
    
      364
    
      365
    
      366  # Replace placeholder "variables" with real paths.
    
      367
    
      368  for file in \
    
      369    gtk-3.0/gdk-pixbuf.loaders
    
      370  do
    
      371    sed -i 's,@@LIBCONF_DIR@@,/usr/lib/vmware/libconf,g' "$pkgdir/usr/lib/vmware/libconf/etc/$file"
    
      372  done
    
      373
    
      374  sed -i 's,@@BINARY@@,/usr/bin/vmware,' "$pkgdir/usr/share/applications/vmware-workstation.desktop"
    
      375  sed -i 's,@@BINARY@@,/usr/bin/vmware-netcfg,' "$pkgdir/usr/share/applications/vmware-netcfg.desktop"
    
      376
    
      377  sed \
    
      378    -e "s/@@VERSION@@/$vmware_installer_version/" \
    
      379    -e "s,@@VMWARE_INSTALLER@@,/usr/lib/vmware-installer/$vmware_installer_version," \
    
      380    -i "$pkgdir/etc/vmware-installer/bootstrap"
    
      381
    
      382
    
      383  # Patch up the VMware kernel sources and configure DKMS.
    
      384
    
      385  dkms_dir="$pkgdir/usr/src/$pkgname-$_pkgver"
    
      386
    
      387  install -Dm 644 "$srcdir/Makefile" "$dkms_dir/Makefile"
    
      388  install -Dm 644 "$srcdir/dkms.conf.in" "$dkms_dir/dkms.conf"
    
      389
    
      390  sed \
    
      391    -e "s/@PKGNAME@/$pkgname/g" \
    
      392    -e "s/@PKGVER@/$_pkgver/g" \
    
      393    -i "$dkms_dir/dkms.conf"
    
      394
    
      395  for module in vmmon vmnet; do
    
      396    tar -xf "vmware-vmx/lib/modules/source/$module.tar" -C "$dkms_dir"
    
      397    msg "Patching $module module for DKMS"
    
      398    patch -p2 --read-only=ignore --directory="$dkms_dir/$module-only" < "$srcdir/$module.patch"
    
      399  done
    
      400
    
      401  rm -r "$pkgdir/usr/lib/vmware/modules/source"
    
      402
    
      403if [ -n "$_enable_macOS_guests" ]; then
    
      404  msg "Patching VMware to enable macOS guest support"
    
      405  python3 "$srcdir/unlocker.py" > /dev/null
    
      406
    
      407  for isoimage in ${_fusion_isoimages[@]}
    
      408  do
    
      409    install -Dm 644 "$srcdir/$isoimage.iso" "$pkgdir/usr/lib/vmware/isoimages/$isoimage.iso"
    
      410  done
    
      411
    
      412  msg "Patching EFI firmwares to disable macOS server checking"
    
      413  _efi_arch=("32" "64" "20-32" "20-64")
    
      414  for arch in ${_efi_arch[@]}
    
      415  do
    
      416    uefipatch "$pkgdir/usr/lib/vmware/roms/EFI${arch}.ROM" "$srcdir/efi-patches.txt" -o "$pkgdir/usr/lib/vmware/roms/EFI${arch}.ROM" > /dev/null
    
      417  done
    
      418fi
    
      419
    
      420  _create_database_file
    
      421
    
      422  # Define some environment variables for VMware and remove the tests about kernel modules
    
      423  install -Dm 644 "$srcdir/vmware-environment.sh" "$pkgdir/etc/conf.d/vmware"
    
      424  for program in vmware vmware-tray; do
    
      425    sed -e '/export PRODUCT_NAME/asource /etc/conf.d/vmware' \
    
      426        -e 's/if "$BINDIR"\/vmware-modconfig --appname=.*/if true ||/' \
    
      427        -i "$pkgdir/usr/bin/$program"
    
      428  done
    
      429
    
      430  # Add StartupWMClass attribute to desktop files
    
      431  sed -i '/^StartupNotify=.*/a StartupWMClass=vmware' "$pkgdir/usr/share/applications/vmware-workstation.desktop"
    
      432  sed -i '/^StartupNotify=.*/a StartupWMClass=vmware-netcfg' "$pkgdir/usr/share/applications/vmware-netcfg.desktop"
    
      433}
    
      434

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	3
2026-08-02 00:16:08	MEDIUM	3
2026-08-01 00:11:18	MEDIUM	3
2026-07-31 00:14:10	MEDIUM	3
2026-07-30 00:17:23	MEDIUM	3
2026-07-29 00:25:53	MEDIUM	3
2026-07-28 00:07:28	MEDIUM	3
2026-07-27 00:24:32	MEDIUM	3
2026-07-26 00:07:32	MEDIUM	3
2026-07-25 00:13:44	MEDIUM	3
2026-07-24 00:02:28	MEDIUM	3
2026-07-23 00:14:47	MEDIUM	3
2026-07-22 00:29:32	MEDIUM	3
2026-07-21 00:24:15	MEDIUM	3
2026-07-20 00:19:49	MEDIUM	3
2026-07-19 00:17:08	MEDIUM	3
2026-07-18 00:14:48	MEDIUM	3
2026-07-17 00:06:16	MEDIUM	3
2026-07-16 00:05:41	MEDIUM	3
2026-07-15 00:09:25	MEDIUM	3