============================ rpmlint session starts ============================ rpmlint: 2.6.1 configuration: /opt/testing/lib/python3.11/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 11 frr.armv6hl: W: zero-perms-ghost Suggestion: "%ghost %attr(0751,frr,frrvty) /run/frr" Your package contains a file with no permissions. This is usually an error because the file won't be accessible by any user. You should check the file permissions and ensure that are correct or fix it using "%attr" macro in %files section. http://ftp.rpm.org/max-rpm/s1-rpm-anywhere-specifying-file-attributes.html frr.armv6hl: W: non-standard-uid /etc/frr frr frr.armv6hl: W: non-standard-uid /etc/frr/daemons frr frr.armv6hl: W: non-standard-uid /etc/frr/frr.conf frr frr.armv6hl: W: non-standard-uid /etc/frr/vtysh.conf frr frr.armv6hl: W: non-standard-uid /run/frr frr frr.armv6hl: W: non-standard-uid /var/log/frr frr A file in this package is owned by an unregistered user id. To register the user, please make a pull request to the rpmlint config file configs/openSUSE/users-groups.toml in the opensuse branch of the rpmlint repository. frr.armv6hl: W: non-standard-gid /etc/frr frr frr.armv6hl: W: non-standard-gid /etc/frr/daemons frr frr.armv6hl: W: non-standard-gid /etc/frr/frr.conf frr frr.armv6hl: W: non-standard-gid /etc/frr/vtysh.conf frrvty frr.armv6hl: W: non-standard-gid /run/frr frr frr.armv6hl: W: non-standard-gid /var/log/frr frr A file in this package is owned by an unregistered group id. To register the group, please make a pull request to the rpmlint config file configs/openSUSE/users-groups.toml in the opensuse branch of the rpmlint repository. frr-devel.armv6hl: E: no-binary The package should be of the noarch architecture because it doesn't contain any binaries. frr.armv6hl: E: missing-call-to-setgroups-before-setuid /usr/bin/vtysh This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. frr.armv6hl: E: env-script-interpreter (Badness: 9) /usr/lib/frr/frr-reload.py /usr/bin/env python3 frr.armv6hl: E: env-script-interpreter (Badness: 9) /usr/lib/frr/frr_babeltrace.py /usr/bin/env python3 frr.armv6hl: E: env-script-interpreter (Badness: 9) /usr/lib/frr/generate_support_bundle.py /usr/bin/env python3 frr.armv6hl: E: env-script-interpreter (Badness: 9) /usr/lib/frr/ospfclient.py /usr/bin/env python3 This script uses 'env' as an interpreter. For the rpm runtime dependency detection to work, the shebang #!/usr/bin/env needs to be patched into #!/usr/bin/ otherwise the package dependency generator merely adds a dependency on /usr/bin/env rather than the actual interpreter /usr/bin/. Alternatively, if the file should not be executed, then ensure that it is not marked as executable or don't install it in a path that is reserved for executables. frr.armv6hl: W: binary-or-shlib-calls-gethostbyname /usr/bin/mtracebis libfrrospfapiclient0.armv6hl: W: binary-or-shlib-calls-gethostbyname /usr/lib/libfrrospfapiclient.so.0.0.0 The binary calls gethostbyname. Please port the code to use getaddrinfo. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BinariesCheck 1.2 37.9 ExtractRpm 0.8 26.1 SharedLibraryPolicyCheck 0.3 9.6 SignatureCheck 0.3 8.4 BashismsCheck 0.2 5.7 FilesCheck 0.1 3.4 BuildRootAndDateCheck 0.1 3.3 TOTAL 3.2 100.0 11 packages and 0 specfiles checked; 6 errors, 15 warnings, 46 filtered, 38 badness; has taken 3.2 s