============================ rpmlint session starts ============================ rpmlint: 2.7.0 configuration: /opt/testing/lib/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 4 inn.armv7hl: E: zero-length /var/lib/news/active.times inn.armv7hl: E: zero-length /var/lib/news/history inn.armv7hl: E: zero-length /var/lib/news/history.pag inn.armv7hl: W: tmpfile-not-in-filelist /run/news Please add the specified file to your %files section as %ghost so users can easily query who created the file, it gets uninstalled on package removal and finally other rpmlint checks see it. inn.armv7hl: E: script-without-shebang /etc/news/innshellvars.local inn.armv7hl: E: script-without-shebang /etc/news/innshellvars.pl.local inn.armv7hl: E: script-without-shebang /etc/news/innshellvars.tcl.local This text file has executable bits set or is located in a path dedicated for executables, but lacks a shebang and cannot thus be executed. If the file is meant to be an executable script, add the shebang, otherwise remove the executable bits or move the file elsewhere. inn.armv7hl: W: potential-bashisms /usr/libexec/news/bin/convertspool inn.armv7hl: W: potential-bashisms /usr/libexec/news/bin/news.daily inn.armv7hl: W: potential-bashisms /usr/libexec/news/bin/send-nntp checkbashisms reported potential bashisms in a /bin/sh shell script, you might want to manually check this script for bashisms. inn.armv7hl: W: permissions-missing-verifyscript missing %verify_permissions -e /usr/libexec/news/bin/inews inn.armv7hl: W: permissions-missing-verifyscript missing %verify_permissions -e /usr/libexec/news/bin/innbind inn.armv7hl: W: permissions-missing-verifyscript missing %verify_permissions -e /usr/libexec/news/bin/rnews mininews.armv7hl: W: permissions-missing-verifyscript missing %verify_permissions -e /usr/libexec/news/bin/inews mininews.armv7hl: W: permissions-missing-verifyscript missing %verify_permissions -e /usr/libexec/news/bin/rnews Please add a %verifyscript section inn.armv7hl: E: non-executable-script /usr/libexec/news/bin/filter/nnrpd_access.pl 644 /usr/bin/perl -w inn.armv7hl: E: non-executable-script /usr/libexec/news/bin/filter/nnrpd_auth.pl 644 /usr/bin/perl -w inn.armv7hl: E: non-executable-script /usr/libexec/news/lib/innshellvars 644 /bin/sh This text file contains a shebang or is located in a path dedicated for executables, but lacks the executable bits and cannot thus be executed. If the file is meant to be an executable script, add the executable bits, otherwise remove the shebang or move the file elsewhere. inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/INN.py inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/filter_innd.pl inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/filter_innd.py inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/filter_nnrpd.pl inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/nnrpd.py inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/nnrpd_access.pl inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/nnrpd_access.py inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/nnrpd_auth.pl inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/nnrpd_auth.py inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/nnrpd_dynamic.py inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/startup_innd.pl A file not in /etc or /var is marked as being a configuration file (%config). Please put your configuration files in /etc or /var. inn.spec: W: no-%check-section The spec file does not contain an %check section. Please check if the package has a testsuite and what it takes to enable the testsuite as part of the package build. If it is not possible to run it in the build environment (OBS/koji) or no testsuite exists, then please ignore this warning. You should not insert an empty %check section. inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/expire inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/expireover inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/innd inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/makedbz inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/makehistory inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/nnrpd inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/tdx-util This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. inn.armv7hl: W: install-file-in-docs /usr/share/doc/packages/inn/INSTALL A file whose name suggests that it contains installation instructions is included in the package. Such instructions are often not relevant for already installed packages. inn.armv7hl: W: hidden-file-or-dir /etc/news/.pgp inn.armv7hl: W: hidden-file-or-dir /etc/news/.pgp inn.armv7hl: W: hidden-file-or-dir /etc/news/.profile The file or directory is hidden. You should see if this is normal, and delete it from the package if not. inn.armv7hl: W: binary-or-shlib-calls-gethostbyname /usr/libexec/news/bin/auth/passwd/radius inn.armv7hl: W: binary-or-shlib-calls-gethostbyname /usr/libexec/news/bin/imapfeed The binary calls gethostbyname. Please port the code to use getaddrinfo. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BashismsCheck 3.0 51.4 BinariesCheck 1.3 21.5 ExtractRpm 1.1 19.4 SUIDPermissionsCheck 0.1 2.5 TOTAL 5.9 100.0 4 packages and 0 specfiles checked; 16 errors, 27 warnings, 168 filtered, 16 badness; has taken 5.9 s