xtables-addons-dkms

LOW

maintainer amish 18 votes scanned 2026-10-03 00:23:04.761738

View on AUR

Why flagged

The source is a tarball from the project's official domain (inai.de), which hosts the upstream project; building from official project sources is normal for AUR packages, even if the host is not on a whitelist.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (inai.de), which hosts the upstream project; building from official project sources is normal for AUR packages, even if the host is not on a whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:20 source=("https://inai.de/files/${_pkgname}/${_pkgname}-${pkgver}.tar.zst"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Amish <contact at via dot aur>
    
      2# Contributor: Iacopo Isimbaldi <isiachi@rhye.it>
    
      3# Contributor: Lubomir Krajcovic <lubomir.krajcovic(AT)gmail(DOT)com>
    
      4# Contributor: Vladimir Kutyavin <vlkut(AT)bk(DOT)ru>
    
      5pkgname=xtables-addons-dkms
    
      6_pkgname="${pkgname%-*}"
    
      7pkgver=3.31
    
      8pkgrel=1
    
      9pkgdesc='DKMS for additional extensions for Xtables packet filter present in the Linux kernel'
    
      10arch=('x86_64' 'aarch64')
    
      11license=('GPL2')
    
      12url="https://inai.de/projects/${_pkgname}/"
    
      13depends=('dkms')
    
      14optdepends=('perl-text-csv-xs: required for building GeoIP database'
    
      15            'perl-net-cidr-lite: required for building GeoIP database'
    
      16            'wget: required for building GeoIP database'
    
      17            'unzip: required for building GeoIP database')
    
      18conflicts=("${_pkgname}" "${_pkgname}-git" "${_pkgname}-multikernel")
    
      19replaces=("${_pkgname}" "${_pkgname}-git" "${_pkgname}-multikernel")
    
      20source=("https://inai.de/files/${_pkgname}/${_pkgname}-${pkgver}.tar.zst"
    
      21        dkms.conf)
    
      22sha256sums=('e22efc25b7bbb3436d1b7cdc309b1857ea933f7e5c7d88fbe6951a1e3e582a80'
    
      23            '5e131d43ce1b282ada4b02599d2c203a01e2444817f5835bd11ba55578e49111')
    
      24
    
      25prepare() {
    
      26    cd "${_pkgname}-${pkgver}"
    
      27
    
      28    # disable install-exec-hook (avoids useless calling of depmod -a at 'make install' stage)
    
      29    sed -i 's/^install-exec-hook:$/dont-run:/' Makefile.am
    
      30    # disable building of xt_ECHO (it's an example module, and it breaks the build)
    
      31    sed -i 's/^build_ECHO=.*$/build_ECHO=n/' mconfig
    
      32
    
      33    autoreconf -fvi
    
      34    ./configure \
    
      35        --prefix=/usr \
    
      36        --sysconfdir=/etc \
    
      37        --bindir=/usr/bin \
    
      38        --sbindir=/usr/bin \
    
      39        --libdir=/usr/lib \
    
      40        --mandir=/usr/share/man \
    
      41        --docdir=/usr/share/doc \
    
      42        --libexecdir=/usr/lib/xtables \
    
      43        --with-xtlibdir=/usr/lib/xtables \
    
      44        --without-kbuild
    
      45}
    
      46
    
      47build() {
    
      48    cd "${_pkgname}-${pkgver}"
    
      49    make
    
      50}
    
      51
    
      52check() {
    
      53    cd "${_pkgname}-${pkgver}"
    
      54    make check
    
      55}
    
      56
    
      57package() {
    
      58    cd "${_pkgname}-${pkgver}"
    
      59
    
      60    # prepare dkms build tree
    
      61    dkmsDst="${pkgdir}/usr/src/${_pkgname}-${pkgver}"
    
      62    install -Dm644 -t "${dkmsDst}" "${srcdir}/dkms.conf"
    
      63    sed -i -e "s/@_PKGNAME/${_pkgname}/" -e "s/@PKGVER@/${pkgver}/" "${dkmsDst}/dkms.conf"
    
      64    cp -r . "${dkmsDst}"
    
      65
    
      66    make DESTDIR="${pkgdir}" install
    
      67}
    
      68

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2
2026-09-30 00:20:07	Low	2
2026-09-29 00:07:46	Low	2
2026-09-28 00:28:32	Low	2
2026-09-27 00:07:07	Low	2
2026-09-26 00:12:15	Low	2
2026-09-25 00:03:36	Low	2
2026-09-24 00:24:14	Low	2
2026-09-23 00:28:13	Low	2
2026-09-22 00:15:14	Low	2
2026-09-21 00:26:32	Low	2
2026-09-20 00:25:31	Low	2
2026-09-19 00:25:36	Low	2
2026-09-18 00:17:11	Low	2
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2