rr.aarch64: W: files-duplicate /usr/share/rr/32bit-pkeys.xml /usr/share/rr/64bit-pkeys.xml rr.aarch64: W: missing-call-to-setgroups-before-setuid /usr/bin/rr This executable is calling setuid and setgid without setgroups or initgroups. There is a high probability this means it didn't relinquish all groups, and this would be a potential security issue to be fixed. Seek POS36-C on the web for details about the problem. rr.aarch64: W: no-version-in-last-changelog rr.src: W: no-version-in-last-changelog The latest changelog entry doesn't contain a version. Please insert the version that is coherent with the version of the package and rebuild it. rr.aarch64: W: position-independent-executable-suggested /usr/bin/rr_exec_stub This executable should be position independent (all binaries should). Check that it is built with -fPIE/-fpie in compiler flags and -pie in linker flags. rr.aarch64: W: script-without-shebang /usr/share/bash-completion/completions/rr This text file has executable bits set or is located in a path dedicated for executables, but lacks a shebang and cannot thus be executed. If the file is meant to be an executable script, add the shebang, otherwise remove the executable bits or move the file elsewhere. rr.aarch64: W: shared-lib-without-dependency-information /usr/lib64/rr/librrpage.so rr.aarch64: W: statically-linked-binary /usr/bin/rr_exec_stub The package installs a statically linked binary or object file. Usually this is a packaging bug. If not, contact your rpmlint distributor about this so that this error gets included in the exception file for rpmlint and will not be flagged as a packaging bug in the future (or add it to your local configuration if you installed rpmlint from the source tarball). rr.aarch64: W: unstripped-binary-or-object /usr/lib64/rr/librrpage.so stripping debug info from binaries happens automatically according to global project settings. So there's normally no need to manually strip binaries. Left over unstripped binaries could therefore indicate a bug in the automatic stripping process. rr.aarch64: E: devel-file-in-non-devel-package (Badness: 50) /usr/share/rr/src/preload/overrides.c rr.aarch64: E: devel-file-in-non-devel-package (Badness: 50) /usr/share/rr/src/preload/preload_interface.h rr.aarch64: E: devel-file-in-non-devel-package (Badness: 50) /usr/share/rr/src/preload/rrcalls.h rr.aarch64: E: devel-file-in-non-devel-package (Badness: 50) /usr/share/rr/src/preload/syscallbuf.c rr.aarch64: E: devel-file-in-non-devel-package (Badness: 50) /usr/share/rr/src/preload/syscallbuf.h A file that is needed only e.g. when developing or building software is included in a non-devel package. These files should go in devel packages. rr.aarch64: E: env-script-interpreter (Badness: 9) /usr/bin/signal-rr-recording.sh /usr/bin/env bash This script uses 'env' as an interpreter. For the rpm runtime dependency detection to work, the shebang #!/usr/bin/env python needs to be patched into #!/usr/bin/python otherwise the package dependency generator merely adds a dependency on /usr/bin/env rather than the actual interpreter /usr/bin/python. Alternatively, if the file should not be executed, then ensure that it is not marked as executable or don't install it in a path that is reserved for executables. 2 packages and 0 specfiles checked; 6 errors, 9 warnings.