Benign arch Download

arch-update-manager-git 3.2.0.r6.ge09bcbc-1

Legitimate Arch Linux package manager

Basename is uppercase README.mdCaret or XOR expression text

SHA-25661fb19b6a9b255ec155f6970acb674544013e0afefdd8d5f16fc3f4d2e2e5cc0

URLhttps://aur.archlinux.org/cgit/aur.git/snapshot/arch-update-manager-git.tar.gz

Evidence

PKGBUILD skips source checksum verification PKGBUILD · lines 17–22

17            'timeshift: pre-update system snapshots'
18            'snapper: pre-update Btrfs snapshots'
19            'aur-scanner: scan AUR packages for security issues'
20            'rate-mirrors: refresh and rank the pacman mirror list')
21source=("$pkgname::git+https://github.com/destbg/arch-update-manager.git#commit=a4bec3f8e11eafd1e6615b054b652419feb4e1b2")
22sha256sums=('SKIP')

Systemd timer unit path PKGBUILD · lines 54–59

install -Dm644 "res/systemd/$_pkgname-check.service" \
"$pkgdir/usr/lib/systemd/user/$_pkgname-check.service"
install -Dm644 "res/systemd/$_pkgname-check.timer" \
"$pkgdir/usr/lib/systemd/user/$_pkgname-check.timer"
install -Dm644 "res/systemd/$_pkgname-tray.service" \
"$pkgdir/usr/lib/systemd/user/$_pkgname-tray.service"

imports std::process dateutils.rs · lines 1–23

1:9… ll(unix, feature = "clock", feature = "std"))]
2
3use std::{path, process, thread};
4
5#[cfg(target_os = "linux")]
6use chrono::Days;
7use chrono::{Datelike, Local, NaiveDate, NaiveDateTime, NaiveTime, TimeZone, Timelike};
8
9fn verify_against_date_command_local(path: &'static str, dt: NaiveDateTime) {
10    let output = process::Command::new(path)
11        .arg("-d")
12        .arg(format!("{}-{:02}-{:02} {:02}:05:01", dt.year(), dt.month(), dt.day(), dt.hour()))
⋯4 lines
17    let date_command_str = String::from_utf8(output.stdout).unwrap();
18
19    // The below would be preferred. At this stage neither earliest() or latest()
20    // seems to be consistent with the output of the `date` command, so we simply
21    // compare both.
22    // let local = Local
23    …

Absolute app/source root path literal dateutils.rs · lines 59–75

59:8… (dead_code)]
60#[cfg(target_os = "aix")]
61const DATE_PATH: &str = "/opt/freeware/bin/date";
62
63#[cfg(test)]
64/// test helper to sanity check the date command behaves as expected
65/// asserts the command succeeded
66fn assert_run_date_version() {
67    // note environment variable `LANG`
68    match std::env::var_os("LANG") {
69        Some(lang) => eprintln!("LANG: {lang:?}"),
70        None => eprintln!("LANG not set"),
71    }
72    let out = process::Command::new(DATE_PATH).arg("--version").output().unwrap();
73    let stdout = String::from_utf8(out.stdout).unwrap();
74    let stderr = String::from_utf8(out.stderr).unwrap();
75    …

Rust synchronous or async test attribute dateutils.rs · lines 75–83

75:21… e` binary version
76    eprintln!("command: {DATE_PATH:?} --version\nstdout: {stdout:?}\nstderr: {stderr:?}");
77    assert!(out.status.success(), "command failed: {DATE_PATH:?} --version");
78}
79
80#[test]
81fn try_verify_against_date_command() {
82    if !path::Path::new(DATE_PATH).exists() {
83        eprintln!("date command {DATE_PATH …

No evidence locations were recorded for this file. Raw result