xtreemfs-server

maintainer orphaned · 1 votes · base xtreemfs · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from the project's official website, used to build the software from source; the host is not whitelisted but is plausibly the project's own, and no untrusted executable is run.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official website, used to build the software from source; the host is not whitelisted but is plausibly the project's own, and no untrusted executable is run.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=("http://www.xtreemfs.org/downloads/$_pkgname-$pkgver.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Toke Høiland-Jørgensen <toke@toke.dk>
    
      2
    
      3pkgbase=xtreemfs
    
      4pkgname=(xtreemfs-server xtreemfs-client)
    
      5_pkgname=XtreemFS
    
      6pkgver=1.5.1
    
      7pkgrel=2
    
      8pkgdesc="A fault-tolerant distributed file system for all storage needs"
    
      9arch=(x86_64)
    
      10url="http://www.xtreemfs.org"
    
      11license=('BSD')
    
      12makedepends=('gcc' 'cmake' 'make' 'apache-ant' 'java-environment' 'fuse' 'boost-libs')
    
      13source=("http://www.xtreemfs.org/downloads/$_pkgname-$pkgver.tar.gz"
    
      14       "fix-openssl11.patch"
    
      15       "xtreemfs-server.install"
    
      16       "xtreemfs-dir.service"
    
      17       "xtreemfs-mrc.service"
    
      18       "xtreemfs-osd.service")
    
      19sha256sums=('278f8a6cb58233d42aeb80442a60475aab569c9736f35dc3325005d8f287928c'
    
      20            'cc543215add8198ffbe363bddcf05182e3e44ecbe55920bbe706b16082dd750f'
    
      21            '8dec87857645817813b103c2332ab5b420021e58eb15fc5a2e0d16a1acef230d'
    
      22            '301a09fcfbdfd70050f14f2708e796b1ecea9d008cfb2d78ec9130c02722a797'
    
      23            '3515b39f91bda2696b924c6cb49d4c402ba8e3696039bf3a492009c574b34ab0'
    
      24            'd6ff68574c613f636187815df2c6776f95ee7e5da25e35bc5908e091e68ac844')
    
      25
    
      26prepare() {
    
      27    cd "$_pkgname-$pkgver"
    
      28    patch -p1 < "$srcdir/fix-openssl11.patch"
    
      29}
    
      30
    
      31build() {
    
      32    cd "$_pkgname-$pkgver"
    
      33    make
    
      34}
    
      35
    
      36package_xtreemfs-server() {
    
      37    depends=('java-environment' 'util-linux')
    
      38    pkgdesc="A fault-tolerant distributed file system for all storage needs (server)"
    
      39    install=xtreemfs-server.install
    
      40    backup=("etc/xos/xtreemfs/dirconfig.properties" 
    
      41            "etc/xos/xtreemfs/mrcconfig.properties" 
    
      42            "etc/xos/xtreemfs/osdconfig.properties"
    
      43            "etc/xos/xtreemfs/server-repl-plugin/dir.properties"
    
      44            "etc/xos/xtreemfs/server-repl-plugin/mrc.properties")
    
      45
    
      46    cd "$_pkgname-$pkgver"
    
      47    install -d -m 0750 "$pkgdir/etc/xos/xtreemfs"
    
      48    install -d -m 0750 "$pkgdir/var/lib/xtreemfs"
    
      49    install -d -m 0750 "$pkgdir/var/log/xtreemfs"
    
      50    install -d -m 0750 "$pkgdir/etc/xos/xtreemfs/truststore"
    
      51
    
      52    make DESTDIR="$pkgdir/" install-server install-tools
    
      53
    
      54    rm -rf "$pkgdir/etc/init.d"
    
      55    rm -f "$pkgdir/etc/xos/xtreemfs/postinstall_setup.sh"
    
      56
    
      57    install -d -m 0755 "$pkgdir/usr/lib/systemd/system/"
    
      58    install -m 0644 "$srcdir/xtreemfs-dir.service" "$pkgdir/usr/lib/systemd/system/"
    
      59    install -m 0644 "$srcdir/xtreemfs-mrc.service" "$pkgdir/usr/lib/systemd/system/"
    
      60    install -m 0644 "$srcdir/xtreemfs-osd.service" "$pkgdir/usr/lib/systemd/system/"
    
      61
    
      62    install -d "$pkgdir/usr/share/licenses/xtreemfs-server"
    
      63    mv "$pkgdir/usr/share/doc/xtreemfs-server/LICENSE" "$pkgdir/usr/share/licenses/xtreemfs-server/"
    
      64    rm -rf "$pkgdir/usr/share/doc"
    
      65
    
      66    chmod 640 "$pkgdir/etc/xos/xtreemfs/"*.properties
    
      67}
    
      68
    
      69package_xtreemfs-client() {
    
      70    depends=('attr' 'openssl' 'fuse' 'boost-libs')
    
      71    pkgdesc="A fault-tolerant distributed file system for all storage needs (client)"
    
      72    backup=("etc/xos/xtreemfs/default_dir")
    
      73
    
      74    cd "$_pkgname-$pkgver"
    
      75    make DESTDIR="$pkgdir/" install-client
    
      76
    
      77    rm -rf "$pkgdir/sbin"
    
      78
    
      79    install -d "$pkgdir/usr/share/licenses/xtreemfs-client"
    
      80    mv "$pkgdir/usr/share/doc/xtreemfs-client/LICENSE" "$pkgdir/usr/share/licenses/xtreemfs-client/"
    
      81    rm -rf "$pkgdir/usr/share/doc"
    
      82}
    
      83

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2