virtualbox.x86_64: I: binary-or-shlib-calls-gethostbyname /usr/lib/virtualbox/VBoxDD.so virtualbox.x86_64: I: binary-or-shlib-calls-gethostbyname /usr/lib/virtualbox/VBoxRT.so virtualbox.x86_64: I: binary-or-shlib-calls-gethostbyname /usr/lib/virtualbox/VBoxXPCOM.so virtualbox.x86_64: I: binary-or-shlib-calls-gethostbyname /usr/lib/virtualbox/components/VBoxRT.so virtualbox.x86_64: I: binary-or-shlib-calls-gethostbyname /usr/lib/virtualbox/components/VBoxXPCOM.so The binary calls gethostbyname(). Please port the code to use getaddrinfo(). virtualbox-guest-tools.x86_64: W: explicit-lib-dependency libnotify-tools You must let rpm find the library dependencies by itself. Do not put unneeded explicit Requires: tags. virtualbox.src:970: W: macro-in-comment %attr virtualbox.src:808: W: macro-in-comment %set_permissions virtualbox.src:970: W: macro-in-comment %verify virtualbox.src:818: W: macro-in-comment %verify_permissions virtualbox.src:617: W: macro-in-comment %{_bindir} virtualbox.src:892: W: macro-in-comment %{_bindir} virtualbox.src:982: W: macro-in-comment %{_bindir} virtualbox.src:684: W: macro-in-comment %{_sysconfdir} virtualbox.src:601: W: macro-in-comment %{_vbox_instdir} virtualbox.src:617: W: macro-in-comment %{_vbox_instdir} virtualbox.src:808: W: macro-in-comment %{_vbox_instdir} virtualbox.src:818: W: macro-in-comment %{_vbox_instdir} virtualbox.src:970: W: macro-in-comment %{_vbox_instdir} virtualbox.src:983: W: macro-in-comment %{_vbox_instdir} virtualbox.src:601: W: macro-in-comment %{buildroot} virtualbox.src:617: W: macro-in-comment %{buildroot} virtualbox.src:684: W: macro-in-comment %{buildroot} There is a unescaped macro after a shell style comment in the specfile. Macros are expanded everywhere, so check if it can cause a problem in this case and escape the macro with another leading % if appropriate. virtualbox.x86_64: W: missing-call-to-setgroups-before-setuid /usr/lib/virtualbox/VBoxHeadless virtualbox.x86_64: W: missing-call-to-setgroups-before-setuid /usr/lib/virtualbox/VBoxNetDHCP virtualbox.x86_64: W: missing-call-to-setgroups-before-setuid /usr/lib/virtualbox/VBoxNetNAT virtualbox-qt.x86_64: W: missing-call-to-setgroups-before-setuid /usr/lib/virtualbox/VirtualBoxVM This executable is calling setuid and setgid without setgroups or initgroups. There is a high probability this means it didn't relinquish all groups, and this would be a potential security issue to be fixed. Seek POS36-C on the web for details about the problem. virtualbox.src: W: name-repeated-in-summary C VirtualBox virtualbox.x86_64: W: name-repeated-in-summary C VirtualBox The name of the package is repeated in its summary. This is often redundant information and looks silly in various programs' output. Make the summary brief and to the point without including redundant information in it. python3-virtualbox.x86_64: W: no-version-in-last-changelog virtualbox-devel.x86_64: W: no-version-in-last-changelog virtualbox-guest-desktop-icons.noarch: W: no-version-in-last-changelog virtualbox-guest-source.noarch: W: no-version-in-last-changelog virtualbox-guest-tools.x86_64: W: no-version-in-last-changelog virtualbox-host-source.noarch: W: no-version-in-last-changelog virtualbox-qt.x86_64: W: no-version-in-last-changelog virtualbox-vnc.x86_64: W: no-version-in-last-changelog virtualbox-websrv.x86_64: W: no-version-in-last-changelog virtualbox.src: W: no-version-in-last-changelog virtualbox.x86_64: W: no-version-in-last-changelog The latest changelog entry doesn't contain a version. Please insert the version that is coherent with the version of the package and rebuild it. virtualbox.x86_64: W: non-standard-gid /etc/vbox/autostart.cfg vboxusers virtualbox.x86_64: W: non-standard-gid /etc/vbox/autostart.d vboxusers virtualbox.x86_64: W: non-standard-gid /etc/vbox/vbox.cfg vboxusers virtualbox.x86_64: W: non-standard-gid /usr/lib/virtualbox/VBoxHeadless vboxusers virtualbox.x86_64: W: non-standard-gid /usr/lib/virtualbox/VBoxNetAdpCtl vboxusers virtualbox.x86_64: W: non-standard-gid /usr/lib/virtualbox/VBoxNetDHCP vboxusers virtualbox.x86_64: W: non-standard-gid /usr/lib/virtualbox/VBoxNetNAT vboxusers virtualbox-qt.x86_64: W: non-standard-gid /usr/lib/virtualbox/VBoxPermissionMessage vboxusers virtualbox-qt.x86_64: W: non-standard-gid /usr/lib/virtualbox/VBoxSUIDMessage vboxusers virtualbox-qt.x86_64: W: non-standard-gid /usr/lib/virtualbox/VBoxUSB_DevRules vboxusers virtualbox-qt.x86_64: W: non-standard-gid /usr/lib/virtualbox/VirtualBox6 vboxusers virtualbox-qt.x86_64: W: non-standard-gid /usr/lib/virtualbox/VirtualBoxVM vboxusers A file in this package is owned by an unregistered group id. To register the group, please branch the devel:openSUSE:Factory:rpmlint rpmlint package, add the group to the "config" file and send a submitrequest. python3-virtualbox.x86_64: W: obsolete-not-provided python-virtualbox python3-virtualbox.x86_64: W: obsolete-not-provided python-virtualbox-ose python3-virtualbox.x86_64: W: obsolete-not-provided python2-virtualbox python3-virtualbox.x86_64: W: obsolete-not-provided python2-virtualbox-ose virtualbox-guest-tools.x86_64: W: obsolete-not-provided virtualbox-guest-x11 virtualbox-websrv.x86_64: W: obsolete-not-provided virtualbox-vboxwebsrv virtualbox-guest-tools.x86_64: W: obsolete-not-provided xorg-x11-driver-virtualbox-ose If a package is obsoleted by a compatible replacement, the obsoleted package should also be provided in order to not cause unnecessary dependency breakage. If the obsoleting package is not a compatible replacement for the old one, leave out the Provides. virtualbox-qt.x86_64: W: permissions-symlink /usr/lib/virtualbox/VirtualBox permissions handling for symlinks is useless. Please contact security@suse.de to remove the entry. Please refer to https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for more information. virtualbox.x86_64: W: shared-lib-without-dependency-information /usr/lib/virtualbox/VBoxDDR0.r0 virtualbox.x86_64: W: shared-lib-without-dependency-information /usr/lib/virtualbox/VMMR0.r0 virtualbox-guest-tools.x86_64: W: standard-dir-owned-by-package /etc/X11 virtualbox-guest-tools.x86_64: W: standard-dir-owned-by-package /media This package owns a directory that is part of the standard hierarchy, which can lead to default directory permissions or ownerships being changed to something non-standard. virtualbox-guest-source.noarch: W: suse-filelist-forbidden-fhs23 /usr/src/kernel-modules is not allowed in FHS 2.3 virtualbox-host-source.noarch: W: suse-filelist-forbidden-fhs23 /usr/src/kernel-modules is not allowed in FHS 2.3 see http://www.pathname.com/fhs/ for a better location virtualbox-guest-tools.x86_64: W: suse-missing-rclink vboxadd-service virtualbox.x86_64: W: suse-missing-rclink vboxautostart-service virtualbox-guest-tools.x86_64: W: suse-missing-rclink vboxclient virtualbox-guest-tools.x86_64: W: suse-missing-rclink vboxservice virtualbox-websrv.x86_64: W: suse-missing-rclink vboxweb-service virtualbox.x86_64: W: suse-missing-rclink vboxweb-service The package contains an init script or systemd service file but lacks the symlink /usr/sbin/rcFOO -> /usr/sbin/service virtualbox.x86_64: W: systemd-service-without-service_add_post vboxweb-service.service The package contains a systemd service but doesn't contain a %post with a call to service_add_post. virtualbox-guest-tools.x86_64: W: systemd-service-without-service_add_pre vboxclient.service virtualbox-guest-tools.x86_64: W: systemd-service-without-service_add_pre vboxservice.service virtualbox.x86_64: W: systemd-service-without-service_add_pre vboxweb-service.service The package contains a systemd service but doesn't contain a %pre with a call to service_add_pre. virtualbox.x86_64: W: systemd-service-without-service_del_postun vboxautostart-service.service virtualbox.x86_64: W: systemd-service-without-service_del_postun vboxautostart-service.service virtualbox.x86_64: W: systemd-service-without-service_del_postun vboxdrv.service virtualbox.x86_64: W: systemd-service-without-service_del_postun vboxdrv.service virtualbox.x86_64: W: systemd-service-without-service_del_postun vboxweb-service.service The package contains a systemd service but doesn't contain a %postun with a call to service_del_postun. virtualbox.x86_64: W: systemd-service-without-service_del_preun vboxweb-service.service The package contains a systemd service but doesn't contain a %preun with a call to service_del_preun. 11 packages and 0 specfiles checked; 0 errors, 77 warnings.