Benign Download

minimal-x86-64/nixos-minimal-25.05.813814.ac62194c3917-x86_64-linux/nix-store.squashfs.d/crs1ks6b3513ymkmxn8g4iivxz95gvkf-nixos-25.05.813814.ac62194c3917/nixos/pkgs/by-name/mf/mfcl5750dw

Text invokes a local relative executablePins an expected SHA-256 digest constant

SHA-2562ae92ef4151c36a6b8056e0b4fb5d1818ba2531473af329f2d5c71d775e655e5

Evidence

Pins an expected SHA-256 digest constant lines 45–63

54… 2614/mfcl5750dwcupswrapper-${finalAttrs.version}.i386.deb";
  sha256 = "afe6d18e17d26348f3b8a4f9a003107984940c429a7dd193054303a21f5e65b5";
};
48
lpr_src = fetchurl {
  url = "https://download.brother.com/welcome/dlf102613/mfcl5750dwlpr-${finalAttrs.version}.i386.deb";
  sha256 = "b1b9c1f9ae8522a65fdd2db1e760aed835807ba593d001ac5471635a157cd1f1";
};
53
⋯4 lines
58
patches = [
  # The brother lpdwrapper uses a temporary file to convey the printer settings.
  # The original settings file will be copied with "400" permissions and the "brprintconflsr3"
  # binary cannot alter the temporary file later on. This fixes the permissions so the can be modified.
  # Since this is all in briefly in the tempora …

Text invokes a local relative executable lines 63–76

87… accessible by others,
  # it shouldn't be a security concern.
  ./fix-perm.patch
];
67
installPhase = ''
  runHook preInstall
  mkdir -p $out
  cp -ar opt $out/opt
72
  # delete unnecessary files for the current architecture
''
+ lib.concatMapStrings (arch: ''
  echo Deleting files for ${ …

English function-word token "have" lines 92–95

43… CL5750DW\"; #"
93
  # Make sure all executables have the necessary runtime dependencies available
  find "$out" -executable -and -type f | while r …