============================ rpmlint session starts ============================ rpmlint: 2.6.1 configuration: /opt/testing/lib/python3.11/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 3 pam.armv6hl: W: tmpfile-not-in-filelist /run/faillock pam.armv6hl: W: tmpfile-not-in-filelist /run/motd.d pam.armv6hl: W: tmpfile-not-in-filelist /run/pam_timestamp Please add the specified file to your %files section as %ghost so users can easily query who created the file, it gets uninstalled on package removal and finally other rpmlint checks see it. pam.armv6hl: E: systemd-service-without-service_del_preun pam_namespace.service The package contains a systemd service but doesn't contain a %preun with a call to service_del_preun. pam.armv6hl: E: systemd-service-without-service_del_postun pam_namespace.service The package contains a systemd service but doesn't contain a %postun with a call to service_del_postun. pam.armv6hl: E: systemd-service-without-service_add_pre pam_namespace.service The package contains a systemd service but doesn't contain a %pre with a call to service_add_pre. pam.armv6hl: E: systemd-service-without-service_add_post pam_namespace.service The package contains a systemd service but doesn't contain a %post with a call to service_add_post. pam.armv6hl: W: permissions-missing-verifyscript missing %verify_permissions -e /usr/sbin/unix2_chkpwd pam.armv6hl: W: permissions-missing-verifyscript missing %verify_permissions -e /usr/sbin/unix_chkpwd Please add a %verifyscript section pam.armv6hl: W: obsolete-not-provided pam_unix pam.armv6hl: W: obsolete-not-provided pam_unix-nis If a package is obsoleted by a compatible replacement, the obsoleted package should also be provided in order to not cause unnecessary dependency breakage. If the obsoleting package is not a compatible replacement for the old one, leave out the Provides. pam-devel.armv6hl: E: no-binary The package should be of the noarch architecture because it doesn't contain any binaries. pam.armv6hl: W: missing-call-to-setgroups-before-setuid /usr/sbin/unix_chkpwd This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BinariesCheck 1.1 63.5 BashismsCheck 0.2 14.3 TOTAL 1.7 100.0 3 packages and 0 specfiles checked; 5 errors, 8 warnings, 184 filtered, 5 badness; has taken 1.7 s