============================ rpmlint session starts ============================ rpmlint: 2.5.0 configuration: /opt/testing/lib/python3.11/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml rpmlintrc: /home/abuild/rpmbuild/SOURCES/monitoring-plugins-rpmlintrc checks: 41, packages: 61 monitoring-plugins.armv7hl: W: self-obsoletion nagios-plugins <= 2.3.5 obsoletes nagios-plugins = 1.5 The package obsoletes itself. This is known to cause errors in various tools and should thus be avoided, usually by using appropriately versioned Obsoletes and/or Provides and avoiding unversioned ones. monitoring-plugins.armv7hl: W: package-with-huge-docs 80% More than half the size of your package is documentation. Consider splitting it into a -doc subpackage. monitoring-plugins.spec:118: E: obsolete-suse-version-check 1020 monitoring-plugins.spec:125: E: obsolete-suse-version-check 910 The specfile contains a comparison of %suse_version against a suse release that is no longer in maintenance. Consider removing obsolete parts of your spec file to make it more readable. monitoring-plugins.armv7hl: E: no-binary monitoring-plugins-all.armv7hl: E: no-binary monitoring-plugins-breeze.armv7hl: E: no-binary monitoring-plugins-cups.armv7hl: E: no-binary monitoring-plugins-dbi-mysql.armv7hl: E: no-binary monitoring-plugins-dbi-pgsql.armv7hl: E: no-binary monitoring-plugins-dbi-sqlite3.armv7hl: E: no-binary monitoring-plugins-disk_smb.armv7hl: E: no-binary monitoring-plugins-extras.armv7hl: E: no-binary monitoring-plugins-file_age.armv7hl: E: no-binary monitoring-plugins-flexlm.armv7hl: E: no-binary monitoring-plugins-ifoperstatus.armv7hl: E: no-binary monitoring-plugins-ifstatus.armv7hl: E: no-binary monitoring-plugins-ircd.armv7hl: E: no-binary monitoring-plugins-log.armv7hl: E: no-binary monitoring-plugins-mailq.armv7hl: E: no-binary monitoring-plugins-oracle.armv7hl: E: no-binary monitoring-plugins-rpc.armv7hl: E: no-binary monitoring-plugins-sensors.armv7hl: E: no-binary monitoring-plugins-uptime.armv7hl: E: no-binary monitoring-plugins-wave.armv7hl: E: no-binary The package should be of the noarch architecture because it doesn't contain any binaries. monitoring-plugins.spec: W: no-%check-section The spec file does not contain an %check section. Even if some packages don't directly need it, section markers may be overridden in rpm's configuration to provide additional 'under the hood' functionality. Add the section, even if empty. monitoring-plugins-by_ssh.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_by_ssh monitoring-plugins-cluster.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_cluster monitoring-plugins-curl.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_curl monitoring-plugins-dbi.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_dbi monitoring-plugins-dhcp.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_dhcp monitoring-plugins-dig.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_dig monitoring-plugins-disk.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_disk monitoring-plugins-dns.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_dns monitoring-plugins-fping.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_fping monitoring-plugins-hpjd.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_hpjd monitoring-plugins-http.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_http monitoring-plugins-icmp.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_icmp monitoring-plugins-ide_smart.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ide_smart monitoring-plugins-ldap.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ldap monitoring-plugins-load.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_load monitoring-plugins-mrtg.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_mrtg monitoring-plugins-mrtgtraf.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_mrtgtraf monitoring-plugins-mysql.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_mysql monitoring-plugins-mysql.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_mysql_query monitoring-plugins-nagios.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_nagios monitoring-plugins-nt.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_nt monitoring-plugins-ntp_peer.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ntp_peer monitoring-plugins-ntp_time.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ntp monitoring-plugins-ntp_time.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ntp_time monitoring-plugins-nwstat.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_nwstat monitoring-plugins-overcr.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_overcr monitoring-plugins-pgsql.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_pgsql monitoring-plugins-ping.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ping monitoring-plugins-procs.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_procs monitoring-plugins-radius.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_radius monitoring-plugins-real.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_real monitoring-plugins-smtp.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_smtp monitoring-plugins-snmp.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_snmp monitoring-plugins-ssh.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ssh monitoring-plugins-swap.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_swap monitoring-plugins-tcp.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_tcp monitoring-plugins-time.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_time monitoring-plugins-ups.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ups monitoring-plugins-users.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_users This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. monitoring-plugins-common.armv7hl: W: ghost-files-without-postin Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BashismsCheck 1.9 42.5 ExtractRpm 0.9 19.2 BinariesCheck 0.7 15.9 SignatureCheck 0.6 12.9 TagsCheck 0.2 4.9 TOTAL 4.4 100.0 61 packages and 0 specfiles checked; 62 errors, 4 warnings, 138 filtered, 62 badness; has taken 4.5 s