Benign Download

minimal-x86-64/nixos-minimal-25.05.813814.ac62194c3917-x86_64-linux/nix-store.squashfs.d/crs1ks6b3513ymkmxn8g4iivxz95gvkf-nixos-25.05.813814.ac62194c3917/nixos/pkgs/os-specific/darwin/impure-cmds

Shell command invokes sudoShell creates a symbolic link

SHA-256b81cbacfe7fae9cbcb92eecd1f2b1de4b18d4dbcacd6a2804a122c58bfc2ed8b

Evidence

Shell command invokes sudo lines 1–14

1{ lib, runCommandLocal }:
2
3# On darwin, there are some commands neither opensource nor able to build in nixpkgs.
4# We have no choice but to use those system-shipped impure ones.
5
6let
7  commands = {
8    ditto = "/usr/bin/ditto"; # ditto is not opensource
9    sudo = "/usr/bin/sudo"; # sudo must be owned by uid 0 and have the setuid bit set
10  };
11
12  mkImpureDrv =
13    name: path:
14    runCommandLocal "${name}-impure-darwin …

Shell invokes mkdir command lines 24–38

6…      echo Cannot find command ${path}
        exit 1
      fi
27
      mkdir -p $out/bin
      ln -s ${path} $out/bin
30
      manpage="/usr/share/man/man1/${name}.1"
      if [ -f $manpage ]; then
        mkdir -p $out/share/man/man1
        ln -s $manpage $out/share/man/man1
      fi
    '';
37in
38lib.mapAttrs mkImpureDrv commands