============================ rpmlint session starts ============================ rpmlint: 2.7.0 configuration: /opt/testing/lib/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 8 liblxc1.armv7hl: W: permissions-missing-verifyscript missing %verify_permissions -e /usr/libexec/lxc/lxc-user-nic Please add a %verifyscript section liblxc-devel.armv7hl: E: no-binary The package should be of the noarch architecture because it doesn't contain any binaries. lxc.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/bin/lxc-attach lxc.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/bin/lxc-execute lxc.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/bin/lxc-start lxc.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/bin/lxc-unshare This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. lxc.armv7hl: E: explicit-lib-dependency libcap-progs You must let rpm find the library dependencies by itself. Do not put unneeded explicit Requires: tags. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BashismsCheck 2.8 65.0 BinariesCheck 0.7 15.3 ExtractRpm 0.4 10.1 SignatureCheck 0.1 3.0 TOTAL 4.2 100.0 8 packages and 0 specfiles checked; 6 errors, 1 warnings, 58 filtered, 6 badness; has taken 4.3 s