vmware-workstation12

maintainer voxan24 · 10 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The PKGBUILD downloads the main VMware Workstation 12 installer bundle and all guest-tools components from a personal/third-party mirror (voxhost.fr) rather than directly from VMware's official CDN. The bundle is then executed as a shell script (bash ... VMware-Workstation-*.bundle) during the prepare() phase, meaning whatever binary is served by that host gets executed on the build machine. VMware Workstation 12 is an EOL product whose official download links are no longer active, so mirroring is understandable, but the mirror is a personal domain controlled by the maintainer with no independent verification chain. The sha256sums are present and would catch substitution if the PKGBUILD itself is not tampered with, but the trust anchor is still the AUR PKGBUILD rather than an official source. This is a classic medium-severity supply-chain concern: executed binaries from an unofficial host, not clearly malicious but not clean either.

Triggered rules

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:71 "https://voxhost.fr/vmware-aur/12/VMware-Workstation-${_pkgver/_/-}.${CARCH}.bundle.tar"

MEDIUM Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

PKGBUILD:384 chmod +s \

MEDIUM AI review llm_review

An AI model (anthropic/claude-4.6-sonnet-20260217) reviewed this and agrees it is MEDIUM (confidence 82%): The PKGBUILD downloads the main VMware Workstation 12 installer bundle and all guest-tools components from a personal/third-party mirror (voxhost.fr) rather than directly from VMware's official CDN. The bundle is then executed as a shell script (bash ... VMware-Workstation-*.bundle) during the prepare() phase, meaning whatever binary is served by that host gets executed on the build machine. VMware Workstation 12 is an EOL product whose official download links are no longer active, so mirroring is understandable, but the mirror is a personal domain controlled by the maintainer with no independent verification chain. The sha256sums are present and would catch substitution if the PKGBUILD itself is not tampered with, but the trust anchor is still the AUR PKGBUILD rather than an official source. This is a classic medium-severity supply-chain concern: executed binaries from an unofficial host, not clearly malicious but not clean either.

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: Voxan24 <admin "at" hessfr "dot" fr>
    
      2
    
      3# To enable macOS guests support, uncomment the line below:
    
      4#_enable_macOS_guests=y
    
      5# CAUTION: Running macOS on VMware Workstation on non Apple computer is forbidden by
    
      6# Apple and VMware EULAs.
    
      7
    
      8# vmware-keymaps dependency is needed to avoid some conflicts when you install
    
      9# this package with vmware-horizon-client. If you don't plan to install
    
      10# vmware-horizon-client and don't want to add this dependency, you can
    
      11# uncomment the line below:
    
      12#_remove_vmware_keymaps_dependency=y
    
      13
    
      14#PKGEXT=.pkg.tar
    
      15pkgname=vmware-workstation12
    
      16pkgver=12.5.9
    
      17_buildver=7535481
    
      18_pkgver=${pkgver}_${_buildver}
    
      19pkgrel=37
    
      20_tools_version=10.1.6-5214329
    
      21pkgdesc='The industry standard for running multiple operating systems as virtual machines on a single Linux PC.'
    
      22arch=(x86_64)
    
      23url='https://www.vmware.com/products/workstation-for-linux.html'
    
      24license=(custom)
    
      25install="vmware-workstation.install"
    
      26conflicts=(
    
      27  vmware-workstation
    
      28  vmware-modules-dkms
    
      29  vmware-ovftool
    
      30  vmware-patch
    
      31  vmware-systemd-services
    
      32)
    
      33provides=(
    
      34  vmware-workstation=$pkgver
    
      35  vmware-ovftool
    
      36)
    
      37depends=(
    
      38  dkms
    
      39  ncurses5-compat-libs
    
      40  fuse2
    
      41  gtkmm
    
      42  libcanberra
    
      43  hicolor-icon-theme
    
      44  libxcrypt-compat # needed for ovftool
    
      45  # needed to replace internal libs:
    
      46  fontconfig
    
      47  freetype2
    
      48  zlib
    
      49)
    
      50optdepends=(
    
      51  'linux-headers: build modules against Arch kernel'
    
      52)
    
      53makedepends=(
    
      54  sqlite
    
      55)
    
      56backup=(
    
      57  'etc/vmware/config'
    
      58  'etc/vmware/hostd/authorization.xml'
    
      59  'etc/vmware/hostd/config.xml'
    
      60  'etc/vmware/hostd/datastores.xml'
    
      61  'etc/vmware/hostd/dispatcher.xml'
    
      62  'etc/vmware/hostd/proxy.xml'
    
      63  'etc/vmware/hostd/tagExtractor.xml'
    
      64  'etc/vmware/netmap.conf'
    
      65  'etc/vmware/ssl/hostd.ssl.config'
    
      66  'etc/pam.d/vmware-authd'
    
      67  'etc/conf.d/vmware'
    
      68)
    
      69#Mirrored from the VMware CDN.
    
      70source=(
    
      71  "https://voxhost.fr/vmware-aur/12/VMware-Workstation-${_pkgver/_/-}.${CARCH}.bundle.tar"
    
      72  "https://voxhost.fr/vmware-aur/12/vmware-tools-freebsd-${_tools_version/_/-}.${CARCH}.component.tar"
    
      73  "https://voxhost.fr/vmware-aur/12/vmware-tools-linux-${_tools_version/_/-}.${CARCH}.component.tar"
    
      74  "https://voxhost.fr/vmware-aur/12/vmware-tools-linuxPreGlibc25-${_tools_version/_/-}.${CARCH}.component.tar"
    
      75  "https://voxhost.fr/vmware-aur/12/vmware-tools-netware-${_tools_version/_/-}.${CARCH}.component.tar"
    
      76  "https://voxhost.fr/vmware-aur/12/vmware-tools-solaris-${_tools_version/_/-}.${CARCH}.component.tar"
    
      77  "https://voxhost.fr/vmware-aur/12/vmware-tools-windows-${_tools_version/_/-}.${CARCH}.component.tar"
    
      78  "https://voxhost.fr/vmware-aur/12/vmware-tools-winPre2k-${_tools_version/_/-}.${CARCH}.component.tar"
    
      79  "https://voxhost.fr/vmware-aur/12/vmware-tools-winPreVista-${_tools_version/_/-}.${CARCH}.component.tar"
    
      80
    
      81  'vmware-bootstrap'
    
      82  'vmware-vix-bootstrap'
    
      83  'config'
    
      84  'pam.d-vmware-authd'
    
      85  'configure-initscript.sh'
    
      86  'vmware-environment.sh'
    
      87
    
      88  'config.xml'
    
      89  'datastores.xml'
    
      90  'environments.xml'
    
      91  'proxy.xml'
    
      92  'vmAutoStart.xml'
    
      93
    
      94  'vmware-hostd-certificates.service'
    
      95  'vmware-hostd.service'
    
      96  'vmware-authd.service'
    
      97  'vmware-networks-configuration.service'
    
      98  'vmware-networks.service'
    
      99  'vmware-usbarbitrator.service'
    
      100  'vmware-networks.path'
    
      101  'vmware-usbarbitrator.path'
    
      102
    
      103  'dkms.conf.in'
    
      104  'Makefile'
    
      105  'vmmon.patch'
    
      106  'vmnet.patch'
    
      107)
    
      108sha256sums=(
    
      109  'bcc7d49d5d93f397920f8ea6e5166b49f1a91ce6a1b4366e9e686ad7530bf9fe'
    
      110  '32f6b9ad4f8bce35796cbee51faa4f12f5b7bcd94b5d0622e5377167aafff394'
    
      111  '409aacb7413a6f8cda959b35b778d3a167e08c0afa365e3e6755601412a4c5cf'
    
      112  'b504f04a8a95e018a8e9d94dcb6d60da22bd65e4bbb0b6b482bfc791367acfc2'
    
      113  '7fbd9063e5cd993b16741e335f602139735df0cf91f18afdb0cefa954620c554'
    
      114  'ed79d279e61f3227d01b73c0cce2400af47edc1253b43b50a384590332efb176'
    
      115  'eb6d2e89bec8f6ec8c946cabd7a8e27b4fc95b23cad38e7f2697ab33722b4308'
    
      116  '40f37a11279b7c55f9dae3acb533a3cf8dafd083d6b10048857a6d5749fe79ed'
    
      117  'f0a6d5992cd3ee188f1974b2a93285ab215d69afb0e9952ad0173caedb5a5a50'
    
      118
    
      119  '12e7b16abf8d7e858532edabb8868919c678063c566a6535855b194aac72d55e'
    
      120  'da1698bf4e73ae466c1c7fc93891eba4b9c4581856649635e6532275dbfea141'
    
      121  '8e3a6302ed8798a6b14780be41dbc05dd4cfbda88c87b97df1c2bea960e15db7'
    
      122  'd50aa0a3fe94025178965d988e18d41eb60aa1ce2b28ee6e3ca15edeabfa2ca7'
    
      123  '8e4d08668a66be79a900521792b39c16a026cc90659241edee80b64e701bfbcd'
    
      124  'b94959a11b28e51b541321be0588190eb10825e9ff55cbd16eb01483a839a69f'
    
      125
    
      126  'd0806b6cb99af04232585def7b8043df3104b9b17470ea70abbd5bedc1e7ca16'
    
      127  '434cd4aa440d36b75ee20e0b588aaad874bb0d796173990bc4046667c66f5099'
    
      128  '25c5aa39489d14a60f9cb30bdd7b21d36399c3355daee8bf5fbebcb62fe9f45f'
    
      129  '3c802523606184a5e8ebbe931d9c6c70d83ff8c6833b9f48aa264f0bd5a18a88'
    
      130  'ad522a8cbc6103134ce5e677a01b503cd21875cbceb37bd13fd870ebd9ad0e6d'
    
      131
    
      132  'f9440479f3ae5ad0a39bba3150276627878bf83d6879444fb327c53a1dbb5a4d'
    
      133  '42594b60085d0bbef01ab07b9f8b0d18640001107ce61cc0ddf02d0ab415140f'
    
      134  'e4c2e97acf07c52de570dd4333d67acfb593db719937a563c6075ab773dcce33'
    
      135  '9b4fbe0ba83f761a2eb9ecd05d48428f8b0a5b3abd8404ccbd928408e682f02b'
    
      136  'c0a5aea785db06921fb350d36d5e0fd9a14f5eee0c835686ec6fea1af8c92245'
    
      137  'd7a9fbf39a0345ae2f14f7f389f30b1110f605d187e0c241e99bbb18993c250d'
    
      138  '16a73931894a65d43da489ff25d07647c0ecddf60d443b103bceca63504910fe'
    
      139  'fe1b1be8297f4170406f97dd1f8b385d911faf45afe19cbc0c26b8092b3ddf8d'
    
      140
    
      141  '10562d11d50edab9abc2b29c8948714edcb9b084f99b3766d07ddd21259e372e'
    
      142  '273d4357599a3e54259c78cc49054fef8ecfd2c2eda35cbcde3a53a62777a5ac'
    
      143  'b0e01be6f0521da8a70fc4e34418aeed1b6825ea9b2dbf3353528427b4bad482'
    
      144  '23f91cb28603dfdf48216450136c948d417fc0b95d52e024729846d168624b0c'
    
      145)
    
      146options=(!strip emptydirs !debug)
    
      147
    
      148if [ -z "$_remove_vmware_keymaps_dependency" ]; then
    
      149depends+=(
    
      150  vmware-keymaps
    
      151)
    
      152fi
    
      153
    
      154_isoimages=(freebsd linux linuxPreGlibc25 netware solaris windows winPre2k winPreVista)
    
      155
    
      156if [ -n "$_enable_macOS_guests" ]; then
    
      157
    
      158#old var, latest version mirrored
    
      159_vmware_fusion_ver=8.5.10
    
      160_vmware_fusion_buildver=7527438
    
      161_vmware_fusion_ver_full=${_vmware_fusion_ver}_${_vmware_fusion_buildver}
    
      162# List of VMware Fusion versions: https://softwareupdate.vmware.com/cds/vmw-desktop/fusion/ -- Dead now
    
      163
    
      164makedepends+=(
    
      165  python
    
      166  p7zip
    
      167  uefitool
    
      168)
    
      169
    
      170source+=(
    
      171  "darwinPre15-tools-${_vmware_fusion_ver_full}.zip.tar::https://voxhost.fr/vmware-aur/12/com.vmware.fusion.tools.darwinPre15.zip.tar"
    
      172  "darwin-tools-${_vmware_fusion_ver_full}.zip.tar::https://voxhost.fr/vmware-aur/12/com.vmware.fusion.tools.darwin.zip.tar"
    
      173  "unlocker.py"
    
      174  "efi-patches.txt"
    
      175)
    
      176sha256sums+=(
    
      177  '78aaa6ba65d178d6242ad73b7e2e552ec707798ce5f4925a0adebf30f844dc17'
    
      178  '6327a76c2503f56d8bc67279f289ed4bb53e236d965ad78c0fcf7ee9e2bbb6c6'
    
      179  '8a61e03d0edbbf60c1c84a43aa87a6e950f82d2c71b968888f019345c2f684f3'
    
      180  '392c1effcdec516000e9f8ffc97f2586524d8953d3e7d6f2c5f93f2acd809d91'
    
      181)
    
      182
    
      183_fusion_isoimages=(darwin darwinPre15)
    
      184fi
    
      185
    
      186
    
      187_create_database_file() {
    
      188  # Create a database which contains the list of guest tools (necessary to avoid that vmware try to download them)
    
      189  local database_filename="$pkgdir/etc/vmware-installer/database"
    
      190  echo -n "" > "$database_filename"
    
      191
    
      192  sqlite3 "$database_filename" "CREATE TABLE settings(key VARCHAR PRIMARY KEY, value VARCHAR NOT NULL, component_name VARCHAR NOT NULL);"
    
      193  sqlite3 "$database_filename" "INSERT INTO settings(key,value,component_name) VALUES('db.schemaVersion','2','vmware-installer');"
    
      194  sqlite3 "$database_filename" "CREATE TABLE components(id INTEGER PRIMARY KEY, name VARCHAR NOT NULL, version VARCHAR NOT NULL, buildNumber INTEGER NOT NULL, component_core_id INTEGER NOT NULL, longName VARCHAR NOT NULL, description VARCHAR, type INTEGER NOT NULL);"
    
      195
    
      196  for isoimage in ${_isoimages[@]}
    
      197  do
    
      198	local version=$(cat "$srcdir/extracted/vmware-tools-$isoimage/manifest.xml" | grep -oPm1 "(?<=<version>)[^<]+")
    
      199	sqlite3 "$database_filename" "INSERT INTO components(name,version,buildNumber,component_core_id,longName,description,type) VALUES('vmware-tools-$isoimage','$version',${_pkgver#*_},1,'$isoimage','$isoimage',1);"
    
      200  done
    
      201
    
      202if [ -n "$_enable_macOS_guests" ]; then
    
      203  for isoimage in ${_fusion_isoimages[@]}
    
      204  do
    
      205	sqlite3 "$database_filename" "INSERT INTO components(name,version,buildNumber,component_core_id,longName,description,type) VALUES('vmware-tools-$isoimage','1',${_vmware_fusion_ver_full#*_},1,'$isoimage','$isoimage',1);"
    
      206  done
    
      207fi
    
      208}
    
      209
    
      210prepare() {
    
      211  extracted_dir="$srcdir/extracted"
    
      212  [[ -d "$extracted_dir" ]] && rm -r "$extracted_dir"
    
      213
    
      214  bash \
    
      215    "$(readlink -f "$srcdir/VMware-Workstation-${_pkgver/_/-}.${CARCH}.bundle")" \
    
      216    --install-component "vmware-tools-freebsd-${_tools_version/_/-}.${CARCH}.component" \
    
      217    --install-component "vmware-tools-linux-${_tools_version/_/-}.${CARCH}.component" \
    
      218    --install-component "vmware-tools-linuxPreGlibc25-${_tools_version/_/-}.${CARCH}.component" \
    
      219    --install-component "vmware-tools-netware-${_tools_version/_/-}.${CARCH}.component" \
    
      220    --install-component "vmware-tools-solaris-${_tools_version/_/-}.${CARCH}.component" \
    
      221    --install-component "vmware-tools-windows-${_tools_version/_/-}.${CARCH}.component" \
    
      222    --install-component "vmware-tools-winPre2k-${_tools_version/_/-}.${CARCH}.component" \
    
      223    --install-component "vmware-tools-winPreVista-${_tools_version/_/-}.${CARCH}.component" \
    
      224    --extract "$extracted_dir"
    
      225
    
      226if [ -n "$_enable_macOS_guests" ]; then
    
      227  for isoimage in ${_fusion_isoimages[@]}
    
      228  do
    
      229    7z e -y com.vmware.fusion.tools.$isoimage.zip payload/\* -o"fusion-isoimages" > /dev/null
    
      230  done
    
      231
    
      232  sed -i -e "s|/usr/lib/vmware/|${pkgdir}/usr/lib/vmware/|" "$srcdir/unlocker.py"
    
      233fi
    
      234}
    
      235
    
      236package() {
    
      237  local vmware_installer_version=$(cat "$srcdir/extracted/vmware-installer/manifest.xml" | grep -oPm1 "(?<=<version>)[^<]+")
    
      238
    
      239  # Make directories and copy files.
    
      240
    
      241  mkdir -p \
    
      242    "$pkgdir/etc"/{cups,pam.d,modprobe.d,thnuclnt,vmware} \
    
      243    "$pkgdir/usr"/{share,bin} \
    
      244    "$pkgdir/usr/include/vmware-vix" \
    
      245    "$pkgdir/usr/lib"/{vmware/setup,vmware-vix,vmware-ovftool,vmware-installer/"$vmware_installer_version",cups/filter,modules-load.d} \
    
      246    "$pkgdir/usr/share"/{doc/vmware-vix,licenses/"$pkgname"} \
    
      247    "$pkgdir/var/lib/vmware/Shared VMs"
    
      248
    
      249  cd "$srcdir/extracted"
    
      250
    
      251  cp -r \
    
      252    vmware-workstation/share/* \
    
      253    vmware-workstation/man \
    
      254    vmware-network-editor-ui/share/* \
    
      255    vmware-player-app/share/* \
    
      256    "$pkgdir/usr/share"
    
      257
    
      258  cp -r \
    
      259    vmware-workstation/bin/* \
    
      260    vmware-vmx/{,s}bin/* \
    
      261    vmware-vix-core/bin/* \
    
      262    vmware-vprobe/bin/* \
    
      263    vmware-workstation-server/{vmware-hostd,vmware-vim-cmd,vmware-wssc-adminTool} \
    
      264    vmware-network-editor-ui/bin/* \
    
      265    vmware-player-app/bin/* \
    
      266    "$pkgdir/usr/bin"
    
      267
    
      268  cp -r \
    
      269    vmware-workstation/lib/* \
    
      270    vmware-player-app/lib/* \
    
      271    vmware-vmx/lib/* \
    
      272    vmware-vprobe/lib/* \
    
      273    vmware-workstation-server/{bin,lib,hostd} \
    
      274    vmware-usbarbitrator/bin \
    
      275    vmware-network-editor/lib \
    
      276    "$pkgdir/usr/lib/vmware"
    
      277
    
      278  cp -r \
    
      279    vmware-player-setup/vmware-config \
    
      280    "$pkgdir/usr/lib/vmware/setup"
    
      281
    
      282  cp -rL \
    
      283    vmware-workstation-server/config/etc/vmware/* \
    
      284    vmware-workstation-server/etc/vmware/* \
    
      285    "$pkgdir/etc/vmware"
    
      286
    
      287  cp -r \
    
      288    vmware-vix-lib-Workstation1200/lib/Workstation-12.0.0 \
    
      289    vmware-vix-core/{lib/*,vixwrapper-config.txt} \
    
      290    "$pkgdir/usr/lib/vmware-vix"
    
      291  cp vmware-vix-core/vix-perl.tar.nogz "$pkgdir/usr/lib/vmware-vix/vix-perl.tar.gz"
    
      292
    
      293  cp -r \
    
      294    vmware-vix-core/doc/* \
    
      295    "$pkgdir/usr/share/doc/vmware-vix"
    
      296
    
      297  cp -r \
    
      298    vmware-ovftool/* \
    
      299    "$pkgdir/usr/lib/vmware-ovftool"
    
      300
    
      301  cp -r \
    
      302    vmware-installer/{python,sopython,vmis,vmis-launcher,vmware-installer,vmware-installer.py} \
    
      303    "$pkgdir/usr/lib/vmware-installer/$vmware_installer_version"
    
      304
    
      305  cp -r \
    
      306    vmware-player-app/etc/cups/* \
    
      307    "$pkgdir/etc/cups"
    
      308
    
      309  cp -r \
    
      310    vmware-player-app/extras/thnucups \
    
      311    "$pkgdir/usr/lib/cups/filter"
    
      312
    
      313  cp -r \
    
      314    vmware-vix-core/include/* \
    
      315    "$pkgdir/usr/include/vmware-vix"
    
      316
    
      317  for isoimage in ${_isoimages[@]}
    
      318  do
    
      319    install -Dm 644 "vmware-tools-$isoimage/$isoimage.iso" "$pkgdir/usr/lib/vmware/isoimages/$isoimage.iso"
    
      320    install -Dm 644 "vmware-tools-$isoimage/$isoimage.iso.sig" "$pkgdir/usr/lib/vmware/isoimages/$isoimage.iso.sig"
    
      321  done
    
      322
    
      323  install -Dm 644 "vmware-player-app/doc/LearnMore.txt" "$pkgdir/usr/share/licenses/$pkgname/Privacy.txt"
    
      324  install -Dm 644 "vmware-workstation/doc/EULA" "$pkgdir/usr/share/licenses/$pkgname/VMware Workstation - EULA.txt"
    
      325  install -Dm 644 "$pkgdir/usr/lib/vmware-ovftool/vmware.eula" "$pkgdir/usr/share/licenses/$pkgname/VMware OVF Tool - EULA.txt"
    
      326  install -Dm 644 "vmware-workstation/doc"/open_source_licenses.txt "$pkgdir/usr/share/licenses/$pkgname/VMware Workstation open source license.txt"
    
      327  install -Dm 644 "vmware-workstation/doc"/ovftool_open_source_licenses.txt "$pkgdir/usr/share/licenses/$pkgname/VMware OVF Tool open source license.txt"
    
      328  install -Dm 644 "vmware-vix-core"/open_source_licenses.txt "$pkgdir/usr/share/licenses/$pkgname/VMware VIX open source license.txt"
    
      329  rm "$pkgdir/usr/lib/vmware-ovftool"/{vmware.eula,vmware-eula.rtf,open_source_licenses.txt,manifest.xml}
    
      330
    
      331  install -Dm 755 "$srcdir/configure-initscript.sh" "$pkgdir/usr/lib/vmware-installer/$vmware_installer_version/bin/configure-initscript.sh"
    
      332
    
      333  install -Dm 644 "vmware-vmx/etc/modprobe.d/modprobe-vmware-fuse.conf" "$pkgdir/etc/modprobe.d/vmware-fuse.conf"
    
      334
    
      335  install -Dm 644 vmware-player-app/lib/isoimages/tools-key.pub "$pkgdir/usr/lib/vmware/isoimages/tools-key.pub"
    
      336
    
      337  install -Dm 644 vmware-vmx/extra/modules.xml "$pkgdir"/usr/lib/vmware/modules/modules.xml
    
      338  install -Dm 644 vmware-installer/bootstrap "$pkgdir"/etc/vmware-installer/bootstrap
    
      339  install -Dm 644 "$srcdir"/vmware-vix-bootstrap "$pkgdir"/etc/vmware-vix/bootstrap
    
      340  install -Dm 644 "$srcdir"/vmware-bootstrap "$pkgdir"/etc/vmware/bootstrap
    
      341  install -Dm 644 "$srcdir"/config "$pkgdir"/etc/vmware/config
    
      342
    
      343if [ -z "$_remove_vmware_keymaps_dependency" ]; then
    
      344  rm -r "$pkgdir/usr/lib/vmware/xkeymap" # these files are provided by vmware-keymaps package
    
      345fi
    
      346
    
      347  for hostd_file in config datastores environments proxy vmAutoStart; do
    
      348    install -Dm 644 "$srcdir/$hostd_file.xml" "$pkgdir/etc/vmware/hostd/$hostd_file.xml"
    
      349  done
    
      350
    
      351  install -Dm 644 "$srcdir/pam.d-vmware-authd" "$pkgdir/etc/pam.d/vmware-authd"
    
      352
    
      353  echo -e "vmw_vmci\nvmmon" > "$pkgdir/usr/lib/modules-load.d/vmware.conf"
    
      354
    
      355  for service_file in \
    
      356    vmware-hostd-certificates.service \
    
      357    vmware-hostd.service \
    
      358    vmware-authd.service \
    
      359    vmware-networks-configuration.service \
    
      360    vmware-networks.service \
    
      361    vmware-usbarbitrator.service \
    
      362    vmware-networks.path \
    
      363    vmware-usbarbitrator.path
    
      364  do
    
      365    install -Dm 644 \
    
      366      "$srcdir/$service_file" \
    
      367      "$pkgdir/usr/lib/systemd/system/$service_file"
    
      368  done
    
      369
    
      370
    
      371  # Apply permissions where necessary.
    
      372
    
      373  chmod +x \
    
      374    "$pkgdir/usr/bin"/* \
    
      375    "$pkgdir/usr/lib/vmware/bin"/* \
    
      376    "$pkgdir/usr/lib/vmware/setup"/* \
    
      377    "$pkgdir/usr/lib/vmware/lib"/{wrapper-gtk24.sh,libgksu2.so.0/gksu-run-helper} \
    
      378    "$pkgdir/usr/lib/vmware-ovftool"/{ovftool,ovftool.bin} \
    
      379    "$pkgdir/usr/lib/vmware-installer/$vmware_installer_version"/{vmware-installer,vmis-launcher} \
    
      380    "$pkgdir/usr/lib/cups/filter"/* \
    
      381    "$pkgdir/usr/lib/vmware-vix/setup"/*
    
      382
    
      383  chmod -R 600 "$pkgdir/etc/vmware/ssl"
    
      384  chmod +s \
    
      385    "$pkgdir/usr/bin"/{vmware-authd,vmware-mount} \
    
      386    "$pkgdir/usr/lib/vmware/bin"/{vmware-vmx,vmware-vmx-debug,vmware-vmx-stats}
    
      387
    
      388
    
      389  # Add symlinks the installer would create.
    
      390
    
      391  for link in \
    
      392    licenseTool \
    
      393    thnuclnt \
    
      394    vmplayer \
    
      395    vmware \
    
      396    vmware-app-control \
    
      397    vmware-enter-serial \
    
      398    vmware-fuseUI \
    
      399    vmware-gksu \
    
      400    vmware-modconfig \
    
      401    vmware-modconfig-console \
    
      402    vmware-netcfg \
    
      403    vmware-tray \
    
      404    vmware-unity-helper \
    
      405    vmware-vmblock-fuse \
    
      406    vmware-zenity
    
      407  do
    
      408    ln -s /usr/lib/vmware/bin/appLoader "$pkgdir/usr/lib/vmware/bin/$link"
    
      409  done
    
      410
    
      411  for floppy in \
    
      412    pvscsi-Windows2003 \
    
      413    pvscsi-Windows2008 \
    
      414    pvscsi-WindowsXP \
    
      415    vmscsi
    
      416  do
    
      417    ln -s /usr/lib/vmware/floppies/${floppy}.flp "$pkgdir/usr/lib/vmware/resources/${floppy}.flp"
    
      418  done
    
      419
    
      420  ln -s /usr/lib/vmware/icu "$pkgdir/etc/vmware/icu"
    
      421  ln -s /usr/lib/vmware/bin/vmware-usbarbitrator "$pkgdir/usr/bin/vmware-usbarbitrator"
    
      422  ln -s /usr/lib/vmware/bin/vmware-hostd "$pkgdir/usr/lib/vmware/bin/vmware-vim-cmd"
    
      423  ln -s /usr/lib/vmware/bin/appLoader "$pkgdir/etc/thnuclnt/.thnumod"
    
      424  ln -s /usr/lib/vmware/lib/diskLibWrapper.so/diskLibWrapper.so "$pkgdir/usr/lib/diskLibWrapper.so"
    
      425  ln -s /usr/lib/vmware-vix/libvixAllProducts.so "$pkgdir/usr/lib/libvixAllProducts.so"
    
      426  ln -s /usr/lib/vmware-ovftool/ovftool "$pkgdir/usr/bin/ovftool"
    
      427
    
      428
    
      429  # Replace placeholder "variables" with real paths.
    
      430
    
      431  for file in \
    
      432    pango/pangorc \
    
      433    pango/pango.modules \
    
      434    pango/pangox.aliases \
    
      435    gtk-2.0/gdk-pixbuf.loaders \
    
      436    gtk-2.0/gtk.immodules
    
      437  do
    
      438    sed -i 's,@@LIBCONF_DIR@@,/usr/lib/vmware/libconf,g' "$pkgdir/usr/lib/vmware/libconf/etc/$file"
    
      439  done
    
      440
    
      441  sed -i 's,@@BINARY@@,/usr/bin/vmware,' "$pkgdir/usr/share/applications/vmware-workstation.desktop"
    
      442  sed -i 's,@@BINARY@@,/usr/bin/vmplayer,' "$pkgdir/usr/share/applications/vmware-player.desktop"
    
      443  sed -i 's,@@BINARY@@,/usr/bin/vmware-netcfg,' "$pkgdir/usr/share/applications/vmware-netcfg.desktop"
    
      444
    
      445  sed -i 's,@@AUTHD_PORT@@,902,' "$pkgdir/usr/lib/vmware/hostd/docroot/client/clients.xml"
    
      446
    
      447  sed \
    
      448    -e "s/@@VERSION@@/$vmware_installer_version/" \
    
      449    -e "s,@@VMWARE_INSTALLER@@,/usr/lib/vmware-installer/$vmware_installer_version," \
    
      450    -i "$pkgdir/etc/vmware-installer/bootstrap"
    
      451
    
      452
    
      453  # Patch up the VMware kernel sources and configure DKMS.
    
      454
    
      455  dkms_dir="$pkgdir/usr/src/$pkgname-$_pkgver"
    
      456
    
      457  install -Dm 644 "$srcdir/Makefile" "$dkms_dir/Makefile"
    
      458  install -Dm 644 "$srcdir/dkms.conf.in" "$dkms_dir/dkms.conf"
    
      459
    
      460  sed \
    
      461    -e "s/@PKGNAME@/$pkgname/g" \
    
      462    -e "s/@PKGVER@/$_pkgver/g" \
    
      463    -i "$dkms_dir/dkms.conf"
    
      464
    
      465  for module in vmmon vmnet; do
    
      466    tar -xf "vmware-vmx/lib/modules/source/$module.tar" -C "$dkms_dir"
    
      467    msg "Patching $module module for DKMS"
    
      468    patch -p2 --read-only=ignore --directory="$dkms_dir/$module-only" < "$srcdir/$module.patch"
    
      469  done
    
      470
    
      471  rm -r "$pkgdir/usr/lib/vmware/modules/source"
    
      472
    
      473if [ -n "$_enable_macOS_guests" ]; then
    
      474  msg "Patching VMware to enable macOS guest support"
    
      475  python3 "$srcdir/unlocker.py" > /dev/null
    
      476
    
      477  for isoimage in ${_fusion_isoimages[@]}
    
      478  do
    
      479    install -Dm 644 "$srcdir/fusion-isoimages/$isoimage.iso" "$pkgdir/usr/lib/vmware/isoimages/$isoimage.iso"
    
      480    install -Dm 644 "$srcdir/fusion-isoimages/$isoimage.iso.sig" "$pkgdir/usr/lib/vmware/isoimages/$isoimage.iso.sig"
    
      481  done
    
      482
    
      483  msg "Patching EFI firmwares to disable macOS server checking"
    
      484  _efi_arch=("32" "64")
    
      485  for arch in ${_efi_arch[@]}
    
      486  do
    
      487    objcopy "$pkgdir"/usr/lib/vmware/bin/vmware-vmx -O binary -j efi${arch} --set-section-flags efi${arch}=a efi${arch}.rom.Z
    
      488    perl -e 'use Compress::Zlib; my $v; read STDIN, $v, '$(stat -c%s "./efi${arch}.rom.Z")'; $v = uncompress($v); print $v;' < efi${arch}.rom.Z > efi${arch}.rom
    
      489
    
      490    uefipatch efi${arch}.rom "$srcdir/efi-patches.txt" -o efi${arch}.rom > /dev/null
    
      491
    
      492    perl -e 'use Compress::Zlib; my $v; read STDIN, $v, '$(stat -c%s "./efi${arch}.rom")'; $v = compress($v); print $v;' < efi${arch}.rom > efi${arch}.rom.Z
    
      493    objcopy "$pkgdir"/usr/lib/vmware/bin/vmware-vmx --update-section efi${arch}=efi${arch}.rom.Z
    
      494    rm efi${arch}.rom efi${arch}.rom.Z
    
      495  done
    
      496fi
    
      497
    
      498  _create_database_file
    
      499
    
      500  # Define some environment variables for VMware and remove the tests about kernel modules
    
      501  install -Dm 644 "$srcdir/vmware-environment.sh" "$pkgdir/etc/conf.d/vmware"
    
      502  for program in vmware vmplayer vmware-netcfg vmware-tray; do
    
      503    sed -e '/export PRODUCT_NAME/asource /etc/conf.d/vmware' \
    
      504        -e 's/if "$BINDIR"\/vmware-modconfig --appname=.*/if true ||/' \
    
      505        -i "$pkgdir/usr/bin/$program"
    
      506  done
    
      507
    
      508  # Add StartupWMClass attribute to desktop files
    
      509  sed -i '/^StartupNotify=.*/a StartupWMClass=vmware' "$pkgdir/usr/share/applications/vmware-workstation.desktop"
    
      510  sed -i '/^StartupNotify=.*/a StartupWMClass=vmplayer' "$pkgdir/usr/share/applications/vmware-player.desktop"
    
      511  sed -i '/^StartupNotify=.*/a StartupWMClass=vmware-netcfg' "$pkgdir/usr/share/applications/vmware-netcfg.desktop"
    
      512
    
      513  # use system font rendering
    
      514  ln -sf /usr/lib/libfreetype.so.6 "$pkgdir/usr/lib/vmware/lib/libfreetype.so.6/"
    
      515  ln -sf /usr/lib/libfontconfig.so.1 "$pkgdir/usr/lib/vmware/lib/libfontconfig.so.1/" # avoid a conflict with fontconfig when VMWARE_USE_SHIPPED_LIBS is defined
    
      516
    
      517  # to solve bugs with incompatibles library versions:
    
      518  ln -sf /usr/lib/libz.so.1 "$pkgdir/usr/lib/vmware/lib/libz.so.1/"
    
      519}
    
      520

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	3
2026-08-02 00:16:08	MEDIUM	3
2026-08-01 00:11:18	MEDIUM	3
2026-07-31 00:14:10	MEDIUM	3
2026-07-30 00:17:23	MEDIUM	3
2026-07-29 00:25:53	MEDIUM	3
2026-07-28 00:07:28	MEDIUM	3
2026-07-27 00:24:32	MEDIUM	3
2026-07-26 00:07:32	MEDIUM	3
2026-07-25 00:13:44	MEDIUM	3
2026-07-24 00:02:28	MEDIUM	3
2026-07-23 00:14:47	MEDIUM	3
2026-07-22 00:29:32	MEDIUM	3
2026-07-21 00:24:15	MEDIUM	3
2026-07-20 00:19:49	MEDIUM	3
2026-07-19 00:17:08	MEDIUM	3
2026-07-18 00:14:48	MEDIUM	3
2026-07-17 00:06:16	MEDIUM	3
2026-07-16 00:05:41	MEDIUM	3
2026-07-15 00:09:25	MEDIUM	3