vmware-workstation15

maintainer voxan24 · 4 votes · scanned 2026-08-03 00:08:14.047287

MEDIUM

Why flagged The PKGBUILD downloads and executes prebuilt VMware Workstation binaries (a .bundle installer and .component files) from voxhost.fr, a personal/unofficial mirror rather than VMware's official CDN (packages.vmware.com or customerconnect.vmware.com). The comment says 'Mirrored from VMWare CDN Archive' but this is unverifiable. The bundle is directly executed via bash in the prepare() function, meaning any compromise of voxhost.fr would result in arbitrary code execution on the builder's machine. SHA256 checksums are present, which mitigates the risk of in-transit tampering, but does not protect against the mirror owner substituting files before the checksums were recorded or updating them in tandem. This is a genuine supply-chain concern: executed proprietary binaries from a third-party personal host. The risk is real but not confirmed malicious, placing this squarely in the medium category.

Triggered rules

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:72 "https://voxhost.fr/vmware-aur/15/VMware-Workstation-${_pkgver/_/-}.${CARCH}.bundle.tar"

MEDIUM Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

PKGBUILD:384 chmod +s \

MEDIUM AI review llm_review

An AI model (anthropic/claude-4.6-sonnet-20260217) reviewed this and agrees it is MEDIUM (confidence 82%): The PKGBUILD downloads and executes prebuilt VMware Workstation binaries (a .bundle installer and .component files) from voxhost.fr, a personal/unofficial mirror rather than VMware's official CDN (packages.vmware.com or customerconnect.vmware.com). The comment says 'Mirrored from VMWare CDN Archive' but this is unverifiable. The bundle is directly executed via bash in the prepare() function, meaning any compromise of voxhost.fr would result in arbitrary code execution on the builder's machine. SHA256 checksums are present, which mitigates the risk of in-transit tampering, but does not protect against the mirror owner substituting files before the checksums were recorded or updating them in tandem. This is a genuine supply-chain concern: executed proprietary binaries from a third-party personal host. The risk is real but not confirmed malicious, placing this squarely in the medium category.

PKGBUILD

2 offending line(s) highlighted

      1# Maintainer: Voxan24 <admin "at" hessfr "dot" fr>
    
      2
    
      3# To enable macOS guests support, uncomment the line below:
    
      4#_enable_macOS_guests=y
    
      5# CAUTION: Running macOS on VMware Workstation on non Apple computer is forbidden by
    
      6# Apple and VMware EULAs.
    
      7
    
      8# vmware-keymaps dependency is needed to avoid some conflicts when you install
    
      9# this package with vmware-horizon-client. If you don't plan to install
    
      10# vmware-horizon-client and don't want to add this dependency, you can
    
      11# uncomment the line below:
    
      12#_remove_vmware_keymaps_dependency=y
    
      13
    
      14#PKGEXT=.pkg.tar
    
      15pkgname=vmware-workstation15
    
      16pkgver=15.5.7
    
      17_buildver=17171714
    
      18_pkgver=${pkgver}_${_buildver}
    
      19pkgrel=23
    
      20_tools_version=11.0.6_15940789
    
      21pkgdesc='The industry standard for running multiple operating systems as virtual machines on a single Linux PC.'
    
      22arch=(x86_64)
    
      23url='https://www.vmware.com/products/workstation-for-linux.html'
    
      24license=(custom)
    
      25install="vmware-workstation.install"
    
      26conflicts=(
    
      27  vmware-workstation
    
      28  vmware-modules-dkms
    
      29  vmware-ovftool
    
      30  vmware-patch
    
      31  vmware-systemd-services
    
      32)
    
      33provides=(
    
      34  vmware-workstation=$pkgver
    
      35  vmware-ovftool
    
      36)
    
      37depends=(
    
      38  dkms
    
      39  fuse2
    
      40  gtkmm3
    
      41  libcanberra
    
      42  libaio
    
      43  pcsclite
    
      44  hicolor-icon-theme
    
      45  libxcrypt-compat # needed for ovftool
    
      46  # needed to use Arch GTK3 library (for theme integration)
    
      47  gtk3
    
      48  gcr
    
      49  libpng12
    
      50)
    
      51optdepends=(
    
      52  'linux-headers: build modules against Arch kernel'
    
      53)
    
      54makedepends=(
    
      55  sqlite
    
      56)
    
      57backup=(
    
      58  'etc/vmware/config'
    
      59  'etc/vmware/hostd/authorization.xml'
    
      60  'etc/vmware/hostd/config.xml'
    
      61  'etc/vmware/hostd/datastores.xml'
    
      62  'etc/vmware/hostd/dispatcher.xml'
    
      63  'etc/vmware/hostd/proxy.xml'
    
      64  'etc/vmware/hostd/tagExtractor.xml'
    
      65  'etc/vmware/netmap.conf'
    
      66  'etc/vmware/ssl/hostd.ssl.config'
    
      67  'etc/pam.d/vmware-authd'
    
      68  'etc/conf.d/vmware'
    
      69)
    
      70#Mirrored from VMWare CDN Archive
    
      71source=(
    
      72  "https://voxhost.fr/vmware-aur/15/VMware-Workstation-${_pkgver/_/-}.${CARCH}.bundle.tar"
    
      73  "https://voxhost.fr/vmware-aur/15/vmware-tools-linux-${_tools_version/_/-}.${CARCH}.component.tar"
    
      74  "https://voxhost.fr/vmware-aur/15/vmware-tools-linuxPreGlibc25-${_tools_version/_/-}.${CARCH}.component.tar"
    
      75  "https://voxhost.fr/vmware-aur/15/vmware-tools-netware-${_tools_version/_/-}.${CARCH}.component.tar"
    
      76  "https://voxhost.fr/vmware-aur/15/vmware-tools-solaris-${_tools_version/_/-}.${CARCH}.component.tar"
    
      77  "https://voxhost.fr/vmware-aur/15/vmware-tools-windows-${_tools_version/_/-}.${CARCH}.component.tar"
    
      78  "https://voxhost.fr/vmware-aur/15/vmware-tools-winPre2k-${_tools_version/_/-}.${CARCH}.component.tar"
    
      79  "https://voxhost.fr/vmware-aur/15/vmware-tools-winPreVista-${_tools_version/_/-}.${CARCH}.component.tar"
    
      80
    
      81  'vmware-bootstrap'
    
      82  'vmware-vix-bootstrap'
    
      83  'config'
    
      84  'pam.d-vmware-authd'
    
      85  'configure-initscript.sh'
    
      86  'vmware-environment.sh'
    
      87
    
      88  'config.xml'
    
      89  'datastores.xml'
    
      90  'environments.xml'
    
      91  'proxy.xml'
    
      92  'vmAutoStart.xml'
    
      93
    
      94  'vmware-hostd-certificates.service'
    
      95  'vmware-hostd.service'
    
      96  'vmware-authd.service'
    
      97  'vmware-networks-configuration.service'
    
      98  'vmware-networks.service'
    
      99  'vmware-usbarbitrator.service'
    
      100  'vmware-networks.path'
    
      101  'vmware-usbarbitrator.path'
    
      102
    
      103  'dkms.conf.in'
    
      104  'Makefile'
    
      105  'vmmon.patch'
    
      106  'vmnet.patch'
    
      107)
    
      108sha256sums=(
    
      109  'b7869701962d10265d0d28b362778841d1c3c55b76b00e76f2414c2790c457b5'
    
      110  '99e12413dede47e655759945114dd5c910a192357de53f072e2000a3a80fda74'
    
      111  '120308fe934baa0394565756505897882e8e58b4709c7c3742f162af84934f19'
    
      112  '1b01f03302930b6c24a62847a895115004dbf260eae8738e86fc3f76a4d004ce'
    
      113  '53ce6b1a336f8a4ecb84443e43a6cc89a68d7c67a14354ea7c3223381897c4a0'
    
      114  'eece24774b9db73a8612400b2a9e150ac954f96e895cc2247d972e89ab323542'
    
      115  '954cddb91d50fcc0b58cfb2536f294d79067ed51139390bfae093cfe48fef543'
    
      116  '71ad24d0af9932303b9072f6ca25625df6802c9761f6b1d4ab29d9c46aec4023'
    
      117
    
      118  '12e7b16abf8d7e858532edabb8868919c678063c566a6535855b194aac72d55e'
    
      119  'da1698bf4e73ae466c1c7fc93891eba4b9c4581856649635e6532275dbfea141'
    
      120  'a138b74eb09f050a3f2eabd5c02ab4a8ac100789d8f1040063b9e8177614e847'
    
      121  'd50aa0a3fe94025178965d988e18d41eb60aa1ce2b28ee6e3ca15edeabfa2ca7'
    
      122  '8e4d08668a66be79a900521792b39c16a026cc90659241edee80b64e701bfbcd'
    
      123  'b94959a11b28e51b541321be0588190eb10825e9ff55cbd16eb01483a839a69f'
    
      124
    
      125  'a28b0c14407a2f2bb33aba0e28a535431a0ccf5f5734f5112607c2bdd18d08ec'
    
      126  '434cd4aa440d36b75ee20e0b588aaad874bb0d796173990bc4046667c66f5099'
    
      127  '92337a4c0a2439863293a8f5e39c37c821d69abb70013805b672e135a73acda1'
    
      128  '3c802523606184a5e8ebbe931d9c6c70d83ff8c6833b9f48aa264f0bd5a18a88'
    
      129  'ad522a8cbc6103134ce5e677a01b503cd21875cbceb37bd13fd870ebd9ad0e6d'
    
      130
    
      131  'f9440479f3ae5ad0a39bba3150276627878bf83d6879444fb327c53a1dbb5a4d'
    
      132  '42594b60085d0bbef01ab07b9f8b0d18640001107ce61cc0ddf02d0ab415140f'
    
      133  'e4c2e97acf07c52de570dd4333d67acfb593db719937a563c6075ab773dcce33'
    
      134  '9b4fbe0ba83f761a2eb9ecd05d48428f8b0a5b3abd8404ccbd928408e682f02b'
    
      135  'c0a5aea785db06921fb350d36d5e0fd9a14f5eee0c835686ec6fea1af8c92245'
    
      136  'd7a9fbf39a0345ae2f14f7f389f30b1110f605d187e0c241e99bbb18993c250d'
    
      137  '16a73931894a65d43da489ff25d07647c0ecddf60d443b103bceca63504910fe'
    
      138  'fe1b1be8297f4170406f97dd1f8b385d911faf45afe19cbc0c26b8092b3ddf8d'
    
      139
    
      140  '10562d11d50edab9abc2b29c8948714edcb9b084f99b3766d07ddd21259e372e'
    
      141  '273d4357599a3e54259c78cc49054fef8ecfd2c2eda35cbcde3a53a62777a5ac'
    
      142  'e9f276375b7133d26e3a1320e5e7c468b85a9ca41f8e9c66a7e4bd99a3eaad99'
    
      143  '03b70c57642447c71f4e30c332287d23306ce58838cdee3a4bba56358fef0edd'
    
      144)
    
      145options=(!strip emptydirs !debug)
    
      146
    
      147if [ -z "$_remove_vmware_keymaps_dependency" ]; then
    
      148depends+=(
    
      149  vmware-keymaps
    
      150)
    
      151fi
    
      152
    
      153
    
      154_isoimages=(linux linuxPreGlibc25 netware solaris windows winPre2k winPreVista)
    
      155_isovirtualprinterimages=(Linux Windows)
    
      156
    
      157if [ -n "$_enable_macOS_guests" ]; then
    
      158#old var, the VMWare Broadcom don't exist anymore :c
    
      159_vmware_fusion_ver=11.5.7
    
      160_vmware_fusion_buildver=17130923
    
      161_vmware_fusion_ver_full=${_vmware_fusion_ver}_${_vmware_fusion_buildver}
    
      162# Mirrored from archive version of: https://softwareupdate.vmware.com/cds/vmw-desktop/fusion/
    
      163
    
      164makedepends+=(
    
      165  python
    
      166  p7zip
    
      167  uefitool
    
      168)
    
      169
    
      170source+=(
    
      171  "VMware-Fusion-${_vmware_fusion_ver_full/_/-}_x86.zip.tar::https://voxhost.fr/vmware-aur/15/com.vmware.fusion.zip.tar"
    
      172  "unlocker.py"
    
      173  "efi-patches.txt"
    
      174)
    
      175sha256sums+=(
    
      176  '79b429ff545a46c965d523d08eb95bba95851526c8844dc6f9187ae47a8e9c68'
    
      177  '8a61e03d0edbbf60c1c84a43aa87a6e950f82d2c71b968888f019345c2f684f3'
    
      178  '392c1effcdec516000e9f8ffc97f2586524d8953d3e7d6f2c5f93f2acd809d91'
    
      179)
    
      180
    
      181_fusion_isoimages=(darwin darwinPre15)
    
      182fi
    
      183
    
      184
    
      185_create_database_file() {
    
      186  # Create a database which contains the list of guest tools (necessary to avoid that vmware try to download them)
    
      187  local database_filename="$pkgdir/etc/vmware-installer/database"
    
      188  echo -n "" > "$database_filename"
    
      189
    
      190  sqlite3 "$database_filename" "CREATE TABLE settings(key VARCHAR PRIMARY KEY, value VARCHAR NOT NULL, component_name VARCHAR NOT NULL);"
    
      191  sqlite3 "$database_filename" "INSERT INTO settings(key,value,component_name) VALUES('db.schemaVersion','2','vmware-installer');"
    
      192  sqlite3 "$database_filename" "CREATE TABLE components(id INTEGER PRIMARY KEY, name VARCHAR NOT NULL, version VARCHAR NOT NULL, buildNumber INTEGER NOT NULL, component_core_id INTEGER NOT NULL, longName VARCHAR NOT NULL, description VARCHAR, type INTEGER NOT NULL);"
    
      193
    
      194  sqlite3 "$database_filename" "INSERT INTO components(name,version,buildNumber,component_core_id,longName,description,type) VALUES('vmware-player','$pkgver',${_pkgver#*_},1,'VMware Player','VMware Player for Linux',0);"
    
      195
    
      196  for isoimage in ${_isoimages[@]}
    
      197  do
    
      198	local version=$(cat "$srcdir/extracted/vmware-tools-$isoimage/manifest.xml" | grep -oPm1 "(?<=<version>)[^<]+")
    
      199	sqlite3 "$database_filename" "INSERT INTO components(name,version,buildNumber,component_core_id,longName,description,type) VALUES('vmware-tools-$isoimage','$version',${_pkgver#*_},1,'$isoimage','$isoimage',1);"
    
      200  done
    
      201
    
      202if [ -n "$_enable_macOS_guests" ]; then
    
      203  for isoimage in ${_fusion_isoimages[@]}
    
      204  do
    
      205	sqlite3 "$database_filename" "INSERT INTO components(name,version,buildNumber,component_core_id,longName,description,type) VALUES('vmware-tools-$isoimage','1',${_vmware_fusion_ver_full#*_},1,'$isoimage','$isoimage',1);"
    
      206  done
    
      207fi
    
      208}
    
      209
    
      210prepare() {
    
      211  extracted_dir="$srcdir/extracted"
    
      212  [[ -d "$extracted_dir" ]] && rm -r "$extracted_dir"
    
      213
    
      214  bash \
    
      215    "$(readlink -f "$srcdir/VMware-Workstation-${_pkgver/_/-}.${CARCH}.bundle")" \
    
      216    --install-component "vmware-tools-linux-${_tools_version/_/-}.${CARCH}.component" \
    
      217    --install-component "vmware-tools-linuxPreGlibc25-${_tools_version/_/-}.${CARCH}.component" \
    
      218    --install-component "vmware-tools-netware-${_tools_version/_/-}.${CARCH}.component" \
    
      219    --install-component "vmware-tools-solaris-${_tools_version/_/-}.${CARCH}.component" \
    
      220    --install-component "vmware-tools-windows-${_tools_version/_/-}.${CARCH}.component" \
    
      221    --install-component "vmware-tools-winPre2k-${_tools_version/_/-}.${CARCH}.component" \
    
      222    --install-component "vmware-tools-winPreVista-${_tools_version/_/-}.${CARCH}.component" \
    
      223    --extract "$extracted_dir"
    
      224
    
      225if [ -n "$_enable_macOS_guests" ]; then
    
      226  7z e -y com.vmware.fusion.zip payload/VMware\ Fusion.app/Contents/Library/isoimages/\* -o"fusion-isoimages" > /dev/null
    
      227
    
      228  sed -i -e "s|/usr/lib/vmware/|${pkgdir}/usr/lib/vmware/|" "$srcdir/unlocker.py"
    
      229fi
    
      230}
    
      231
    
      232package() {
    
      233  local vmware_installer_version=$(cat "$srcdir/extracted/vmware-installer/manifest.xml" | grep -oPm1 "(?<=<version>)[^<]+")
    
      234
    
      235  # Make directories and copy files.
    
      236
    
      237  mkdir -p \
    
      238    "$pkgdir/etc"/{cups,pam.d,modprobe.d,thnuclnt,vmware} \
    
      239    "$pkgdir/usr"/{share,bin} \
    
      240    "$pkgdir/usr/include/vmware-vix" \
    
      241    "$pkgdir/usr/lib"/{vmware/{setup,lib/libvmware-vim-cmd.so},vmware-vix,vmware-ovftool,vmware-installer/"$vmware_installer_version",cups/filter,modules-load.d} \
    
      242    "$pkgdir/usr/share"/{doc/vmware-vix,licenses/"$pkgname"} \
    
      243    "$pkgdir/var/lib/vmware/Shared VMs"
    
      244
    
      245  cd "$srcdir/extracted"
    
      246
    
      247  cp -r \
    
      248    vmware-workstation/share/* \
    
      249    vmware-workstation/man \
    
      250    vmware-network-editor-ui/share/* \
    
      251    vmware-player-app/share/* \
    
      252    "$pkgdir/usr/share"
    
      253
    
      254  cp -r \
    
      255    vmware-workstation/bin/* \
    
      256    vmware-vmx/{,s}bin/* \
    
      257    vmware-vix-core/bin/* \
    
      258    vmware-vprobe/bin/* \
    
      259    vmware-workstation-server/{vmware-hostd,vmware-vim-cmd,vmware-wssc-adminTool} \
    
      260    vmware-player-app/bin/* \
    
      261    "$pkgdir/usr/bin"
    
      262
    
      263  cp -r \
    
      264    vmware-workstation/lib/* \
    
      265    vmware-player-app/lib/* \
    
      266    vmware-vmx/{lib/*,roms} \
    
      267    vmware-vprobe/lib/* \
    
      268    vmware-workstation-server/{bin,lib,hostd} \
    
      269    vmware-usbarbitrator/bin \
    
      270    vmware-network-editor/lib \
    
      271    "$pkgdir/usr/lib/vmware"
    
      272
    
      273  cp -r \
    
      274    vmware-player-setup/vmware-config \
    
      275    "$pkgdir/usr/lib/vmware/setup"
    
      276
    
      277  cp -rL \
    
      278    vmware-workstation-server/config/etc/vmware/* \
    
      279    vmware-workstation-server/etc/vmware/* \
    
      280    "$pkgdir/etc/vmware"
    
      281
    
      282  cp -r \
    
      283    vmware-vix-lib-Workstation1500/lib/Workstation-15.0.0 \
    
      284    vmware-vix-core/{lib/*,vixwrapper-config.txt} \
    
      285    "$pkgdir/usr/lib/vmware-vix"
    
      286
    
      287  cp -r \
    
      288    vmware-vix-core/doc/* \
    
      289    "$pkgdir/usr/share/doc/vmware-vix"
    
      290
    
      291  cp -r \
    
      292    vmware-ovftool/* \
    
      293    "$pkgdir/usr/lib/vmware-ovftool"
    
      294
    
      295  cp -r \
    
      296    vmware-installer/{python,sopython,vmis,vmis-launcher,vmware-installer,vmware-installer.py} \
    
      297    "$pkgdir/usr/lib/vmware-installer/$vmware_installer_version"
    
      298
    
      299  cp -r \
    
      300    vmware-player-app/etc/cups/* \
    
      301    "$pkgdir/etc/cups"
    
      302  cp -r \
    
      303    vmware-player-app/extras/.thnumod \
    
      304    "$pkgdir/etc/thnuclnt"
    
      305  cp -r \
    
      306    vmware-player-app/extras/thnucups \
    
      307    "$pkgdir/usr/lib/cups/filter"
    
      308
    
      309  cp -r \
    
      310    vmware-vix-core/include/* \
    
      311    "$pkgdir/usr/include/vmware-vix"
    
      312
    
      313  for isoimage in ${_isoimages[@]}
    
      314  do
    
      315    install -Dm 644 "vmware-tools-$isoimage/$isoimage.iso" "$pkgdir/usr/lib/vmware/isoimages/$isoimage.iso"
    
      316  done
    
      317
    
      318  for isoimage in ${_isovirtualprinterimages[@]}
    
      319  do
    
      320    install -Dm 644 "vmware-virtual-printer/VirtualPrinter-$isoimage.iso" "$pkgdir/usr/lib/vmware/isoimages/VirtualPrinter-$isoimage.iso"
    
      321  done
    
      322
    
      323  install -Dm 644 "vmware-workstation/doc/EULA" "$pkgdir/usr/share/doc/vmware-workstation/EULA"
    
      324  ln -s "/usr/share/doc/vmware-workstation/EULA" "$pkgdir/usr/share/licenses/$pkgname/VMware Workstation - EULA.txt"
    
      325  ln -s "/usr/lib/vmware-ovftool/vmware.eula" "$pkgdir/usr/share/licenses/$pkgname/VMware OVF Tool - EULA.txt"
    
      326  install -Dm 644 "vmware-workstation/doc"/open_source_licenses.txt "$pkgdir/usr/share/licenses/$pkgname/VMware Workstation open source license.txt"
    
      327  install -Dm 644 "vmware-workstation/doc"/ovftool_open_source_licenses.txt "$pkgdir/usr/share/licenses/$pkgname/VMware OVF Tool open source license.txt"
    
      328  install -Dm 644 "vmware-vix-core"/open_source_licenses.txt "$pkgdir/usr/share/licenses/$pkgname/VMware VIX open source license.txt"
    
      329  rm "$pkgdir/usr/lib/vmware-ovftool"/{vmware-eula.rtf,open_source_licenses.txt,manifest.xml}
    
      330
    
      331  install -d -m 755 "$pkgdir/usr/lib/vmware-installer/$vmware_installer_version"/{lib/lib,artwork}
    
      332  install -Dm 755 "$srcdir/configure-initscript.sh" "$pkgdir/usr/lib/vmware-installer/$vmware_installer_version/bin/configure-initscript.sh"
    
      333
    
      334  install -Dm 644 "vmware-vmx/etc/modprobe.d/modprobe-vmware-fuse.conf" "$pkgdir/etc/modprobe.d/vmware-fuse.conf"
    
      335
    
      336  install -Dm 644 vmware-vmx/extra/modules.xml "$pkgdir"/usr/lib/vmware/modules/modules.xml
    
      337  install -Dm 644 vmware-installer/bootstrap "$pkgdir"/etc/vmware-installer/bootstrap
    
      338  install -Dm 644 "$srcdir"/vmware-vix-bootstrap "$pkgdir"/etc/vmware-vix/bootstrap
    
      339  install -Dm 644 "$srcdir"/vmware-bootstrap "$pkgdir"/etc/vmware/bootstrap
    
      340  install -Dm 644 "$srcdir"/config "$pkgdir"/etc/vmware/config
    
      341
    
      342if [ -z "$_remove_vmware_keymaps_dependency" ]; then
    
      343  rm -r "$pkgdir/usr/lib/vmware/xkeymap" # these files are provided by vmware-keymaps package
    
      344fi
    
      345
    
      346  for hostd_file in config datastores environments proxy vmAutoStart; do
    
      347    install -Dm 644 "$srcdir/$hostd_file.xml" "$pkgdir/etc/vmware/hostd/$hostd_file.xml"
    
      348  done
    
      349
    
      350  install -Dm 644 "$srcdir/pam.d-vmware-authd" "$pkgdir/etc/pam.d/vmware-authd"
    
      351
    
      352  echo -e "vmw_vmci\nvmmon" > "$pkgdir/usr/lib/modules-load.d/vmware.conf"
    
      353
    
      354  for service_file in \
    
      355    vmware-hostd-certificates.service \
    
      356    vmware-hostd.service \
    
      357    vmware-authd.service \
    
      358    vmware-networks-configuration.service \
    
      359    vmware-networks.service \
    
      360    vmware-usbarbitrator.service \
    
      361    vmware-networks.path \
    
      362    vmware-usbarbitrator.path
    
      363  do
    
      364    install -Dm 644 \
    
      365      "$srcdir/$service_file" \
    
      366      "$pkgdir/usr/lib/systemd/system/$service_file"
    
      367  done
    
      368
    
      369
    
      370  # Apply permissions where necessary.
    
      371
    
      372  chmod +x \
    
      373    "$pkgdir/usr/bin"/* \
    
      374    "$pkgdir/usr/lib/vmware/bin"/* \
    
      375    "$pkgdir/usr/lib/vmware/setup"/* \
    
      376    "$pkgdir/usr/lib/vmware/lib"/libvmware-gksu.so/gksu-run-helper \
    
      377    "$pkgdir/usr/lib/vmware-ovftool"/{ovftool,ovftool.bin} \
    
      378    "$pkgdir/usr/lib/vmware-installer/$vmware_installer_version"/{vmware-installer,vmis-launcher} \
    
      379    "$pkgdir/usr/lib/cups/filter"/* \
    
      380    "$pkgdir/usr/lib/vmware-vix/setup"/* \
    
      381    "$pkgdir/etc/thnuclnt/.thnumod"
    
      382
    
      383  chmod -R 600 "$pkgdir/etc/vmware/ssl"
    
      384  chmod +s \
    
      385    "$pkgdir/usr/bin"/vmware-authd \
    
      386    "$pkgdir/usr/lib/vmware/bin"/{vmware-vmx,vmware-vmx-debug,vmware-vmx-stats}
    
      387
    
      388
    
      389  # Add symlinks the installer would create.
    
      390
    
      391  for link in \
    
      392    licenseTool \
    
      393    vmplayer \
    
      394    vmware \
    
      395    vmware-app-control \
    
      396    vmware-enter-serial \
    
      397    vmware-fuseUI \
    
      398    vmware-gksu \
    
      399    vmware-hostd \
    
      400    vmware-modconfig \
    
      401    vmware-modconfig-console \
    
      402    vmware-mount \
    
      403    vmware-netcfg \
    
      404    vmware-setup-helper \
    
      405    vmware-tray \
    
      406    vmware-vim-cmd \
    
      407    vmware-vmblock-fuse \
    
      408    vmware-vprobe \
    
      409    vmware-wssc-adminTool \
    
      410    vmware-zenity
    
      411  do
    
      412    ln -s /usr/lib/vmware/bin/appLoader "$pkgdir/usr/lib/vmware/bin/$link"
    
      413  done
    
      414
    
      415  for link in \
    
      416    vmrest
    
      417  do
    
      418    ln -s /usr/lib/vmware/bin/appLoader "$pkgdir/usr/bin/$link"
    
      419  done
    
      420
    
      421  for link in \
    
      422    vmware-fuseUI \
    
      423    vmware-mount \
    
      424    vmware-netcfg \
    
      425    vmware-usbarbitrator
    
      426  do
    
      427    ln -s /usr/lib/vmware/bin/$link "$pkgdir/usr/bin/$link"
    
      428  done
    
      429
    
      430  ln -s /usr/lib/vmware/icu "$pkgdir/etc/vmware/icu"
    
      431  ln -s /usr/lib/vmware/lib/diskLibWrapper.so/diskLibWrapper.so "$pkgdir/usr/lib/diskLibWrapper.so"
    
      432  ln -s /usr/lib/vmware/lib/libvmware-hostd.so/libvmware-hostd.so "$pkgdir/usr/lib/vmware/lib/libvmware-vim-cmd.so/libvmware-vim-cmd.so"
    
      433  ln -s /usr/lib/vmware-ovftool/ovftool "$pkgdir/usr/bin/ovftool"
    
      434  ln -s /usr/lib/vmware-vix/libvixAllProducts.so "$pkgdir/usr/lib/libvixAllProducts.so"
    
      435
    
      436
    
      437  # Replace placeholder "variables" with real paths.
    
      438
    
      439  for file in \
    
      440    gtk-3.0/gdk-pixbuf.loaders
    
      441  do
    
      442    sed -i 's,@@LIBCONF_DIR@@,/usr/lib/vmware/libconf,g' "$pkgdir/usr/lib/vmware/libconf/etc/$file"
    
      443  done
    
      444
    
      445  sed -i 's,@@BINARY@@,/usr/bin/vmware,' "$pkgdir/usr/share/applications/vmware-workstation.desktop"
    
      446  sed -i 's,@@BINARY@@,/usr/bin/vmplayer,' "$pkgdir/usr/share/applications/vmware-player.desktop"
    
      447  sed -i 's,@@BINARY@@,/usr/bin/vmware-netcfg,' "$pkgdir/usr/share/applications/vmware-netcfg.desktop"
    
      448
    
      449  sed -i 's,@@AUTHD_PORT@@,902,' "$pkgdir/usr/lib/vmware/hostd/docroot/client/clients.xml"
    
      450
    
      451  sed \
    
      452    -e "s/@@VERSION@@/$vmware_installer_version/" \
    
      453    -e "s,@@VMWARE_INSTALLER@@,/usr/lib/vmware-installer/$vmware_installer_version," \
    
      454    -i "$pkgdir/etc/vmware-installer/bootstrap"
    
      455
    
      456
    
      457  # Patch up the VMware kernel sources and configure DKMS.
    
      458
    
      459  dkms_dir="$pkgdir/usr/src/$pkgname-$_pkgver"
    
      460
    
      461  install -Dm 644 "$srcdir/Makefile" "$dkms_dir/Makefile"
    
      462  install -Dm 644 "$srcdir/dkms.conf.in" "$dkms_dir/dkms.conf"
    
      463
    
      464  sed \
    
      465    -e "s/@PKGNAME@/$pkgname/g" \
    
      466    -e "s/@PKGVER@/$_pkgver/g" \
    
      467    -i "$dkms_dir/dkms.conf"
    
      468
    
      469  for module in vmmon vmnet; do
    
      470    tar -xf "vmware-vmx/lib/modules/source/$module.tar" -C "$dkms_dir"
    
      471    msg "Patching $module module for DKMS"
    
      472    patch -p2 --read-only=ignore --directory="$dkms_dir/$module-only" < "$srcdir/$module.patch"
    
      473  done
    
      474
    
      475  rm -r "$pkgdir/usr/lib/vmware/modules/source"
    
      476
    
      477if [ -n "$_enable_macOS_guests" ]; then
    
      478  msg "Patching VMware to enable macOS guest support"
    
      479  python3 "$srcdir/unlocker.py" > /dev/null
    
      480
    
      481  for isoimage in ${_fusion_isoimages[@]}
    
      482  do
    
      483    install -Dm 644 "$srcdir/fusion-isoimages/$isoimage.iso" "$pkgdir/usr/lib/vmware/isoimages/$isoimage.iso"
    
      484  done
    
      485
    
      486  msg "Patching EFI firmwares to disable macOS server checking"
    
      487  _efi_arch=("32" "64")
    
      488  for arch in ${_efi_arch[@]}
    
      489  do
    
      490    uefipatch "$pkgdir/usr/lib/vmware/roms/EFI${arch}.ROM" "$srcdir/efi-patches.txt" -o "$pkgdir/usr/lib/vmware/roms/EFI${arch}.ROM" > /dev/null
    
      491  done
    
      492fi
    
      493
    
      494  _create_database_file
    
      495
    
      496  # Define some environment variables for VMware and remove the tests about kernel modules
    
      497  install -Dm 644 "$srcdir/vmware-environment.sh" "$pkgdir/etc/conf.d/vmware"
    
      498  for program in vmware vmplayer vmware-tray; do
    
      499    sed -e '/export PRODUCT_NAME/asource /etc/conf.d/vmware' \
    
      500        -e 's/if "$BINDIR"\/vmware-modconfig --appname=.*/if true ||/' \
    
      501        -i "$pkgdir/usr/bin/$program"
    
      502  done
    
      503
    
      504  # Add StartupWMClass attribute to desktop files
    
      505  sed -i '/^StartupNotify=.*/a StartupWMClass=vmware' "$pkgdir/usr/share/applications/vmware-workstation.desktop"
    
      506  sed -i '/^StartupNotify=.*/a StartupWMClass=vmplayer' "$pkgdir/usr/share/applications/vmware-player.desktop"
    
      507  sed -i '/^StartupNotify=.*/a StartupWMClass=vmware-netcfg' "$pkgdir/usr/share/applications/vmware-netcfg.desktop"
    
      508}
    
      509

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	MEDIUM	3
2026-08-02 00:16:08	MEDIUM	3
2026-08-01 00:11:18	MEDIUM	3
2026-07-31 00:14:10	MEDIUM	3
2026-07-30 00:17:23	MEDIUM	3
2026-07-29 00:25:53	MEDIUM	3
2026-07-28 00:07:28	MEDIUM	3
2026-07-27 00:24:32	MEDIUM	3
2026-07-26 00:07:32	MEDIUM	3
2026-07-25 00:13:44	MEDIUM	3
2026-07-24 00:02:28	MEDIUM	3
2026-07-23 00:14:47	MEDIUM	3
2026-07-22 00:29:32	MEDIUM	3
2026-07-21 00:24:15	MEDIUM	3
2026-07-20 00:19:49	MEDIUM	3
2026-07-19 00:17:08	MEDIUM	3
2026-07-18 00:14:48	MEDIUM	3
2026-07-17 00:06:16	MEDIUM	3
2026-07-16 00:05:41	MEDIUM	3
2026-07-15 00:09:25	MEDIUM	3