============================ rpmlint session starts ============================ rpmlint: 2.6.1 configuration: /opt/testing/lib/python3.11/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 4 firejail.armv7hl: W: permissions-missing-verifyscript missing %verify_permissions -e /usr/bin/firejail Please add a %verifyscript section firejail.spec: W: no-%check-section The spec file does not contain an %check section. Please check if the package has a testsuite and what it takes to enable the testsuite as part of the package build. If it is not possible to run it in the build environment (OBS/koji) or no testsuite exists, then please ignore this warning. You should not insert an empty %check section. firejail.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/bin/jailcheck firejail.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/lib/firejail/libtrace.so This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BinariesCheck 0.4 24.8 ExtractRpm 0.4 23.2 ConfigFilesCheck 0.2 12.4 SUIDPermissionsCheck 0.2 10.5 FilesCheck 0.2 9.3 BashismsCheck 0.1 8.7 TOTAL 1.7 100.0 4 packages and 0 specfiles checked; 2 errors, 2 warnings, 1286 filtered, 2 badness; has taken 1.7 s