============================ rpmlint session starts ============================ rpmlint: 2.6.1 configuration: /opt/testing/lib/python3.11/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 4 slang.spec:38: E: obsolete-suse-version-check 1210 The specfile contains a comparison of %suse_version against a suse release that is no longer in maintenance. Consider removing obsolete parts of your spec file to make it more readable. slang-devel.armv7hl: E: no-binary The package should be of the noarch architecture because it doesn't contain any binaries. libslang2.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/libslang.so.2.3.3 This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. slang-devel.armv7hl: E: env-script-interpreter (Badness: 9) /usr/share/doc/packages/slang-devel/examples/prime.sl /usr/bin/env slsh slang-devel.armv7hl: E: env-script-interpreter (Badness: 9) /usr/share/doc/packages/slang-devel/examples/sort.sl /usr/bin/env slsh slang-slsh.armv7hl: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/jpegsize /usr/bin/env slsh slang-slsh.armv7hl: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/lsrpm /usr/bin/env slsh slang-slsh.armv7hl: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/slcov /usr/bin/env slsh slang-slsh.armv7hl: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/sldb /usr/bin/env slsh slang-slsh.armv7hl: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/slprof /usr/bin/env slsh slang-slsh.armv7hl: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/slstkchk /usr/bin/env slsh slang-slsh.armv7hl: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/svnsh /usr/bin/env slsh This script uses 'env' as an interpreter. For the rpm runtime dependency detection to work, the shebang #!/usr/bin/env needs to be patched into #!/usr/bin/ otherwise the package dependency generator merely adds a dependency on /usr/bin/env rather than the actual interpreter /usr/bin/. Alternatively, if the file should not be executed, then ensure that it is not marked as executable or don't install it in a path that is reserved for executables. slang-slsh.armv7hl: W: binary-or-shlib-calls-gethostbyname /usr/lib/slang/v2/modules/socket-module.so The binary calls gethostbyname. Please port the code to use getaddrinfo. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BinariesCheck 0.5 59.7 TOTAL 0.8 100.0 4 packages and 0 specfiles checked; 12 errors, 1 warnings, 12 filtered, 84 badness; has taken 0.8 s