============================ rpmlint session starts ============================ rpmlint: 2.7.0 configuration: /opt/testing/lib/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 4 mgetty.armv7hl: E: script-without-shebang /etc/mgetty+sendfax/callback.config This text file has executable bits set or is located in a path dedicated for executables, but lacks a shebang and cannot thus be executed. If the file is meant to be an executable script, add the shebang, otherwise remove the executable bits or move the file elsewhere. mgetty.armv7hl: W: potential-bashisms /usr/share/doc/packages/mgetty/voice/scripts/faxback.sh sendfax.armv7hl: W: potential-bashisms /usr/bin/faxspool checkbashisms reported potential bashisms in a /bin/sh shell script, you might want to manually check this script for bashisms. sendfax.armv7hl: W: permissions-missing-verifyscript missing %verify_permissions -e /usr/libexec/mgetty+sendfax/faxq-helper sendfax.armv7hl: W: permissions-missing-verifyscript missing %verify_permissions -e /var/spool/fax/outgoing Please add a %verifyscript section mgetty.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/lib/mgetty+sendfax/new_fax A file not in /etc or /var is marked as being a configuration file (%config). Please put your configuration files in /etc or /var. mgetty.spec: W: no-%check-section The spec file does not contain an %check section. Please check if the package has a testsuite and what it takes to enable the testsuite as part of the package build. If it is not possible to run it in the build environment (OBS/koji) or no testsuite exists, then please ignore this warning. You should not insert an empty %check section. mgetty.armv7hl: W: name-repeated-in-summary Mgetty mgetty.src: W: name-repeated-in-summary Mgetty The name of the package is repeated in its summary. Make the summary brief and to the point without including redundant information in it. mgetty.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/bin/vm mgetty.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/sbin/mgetty mgetty.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/sbin/vgetty This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. mgetty.spec:236: W: macro-in-comment %config There is a unescaped macro after a shell style comment in the specfile. Macros are expanded everywhere, so check if it can cause a problem in this case and escape the macro with another leading % if appropriate. mgetty.armv7hl: E: logrotate-log-dir-not-packaged /var/log Please add the specified directory to the file list to be able to check permissions. mgetty.armv7hl: W: install-file-in-docs /usr/share/doc/packages/mgetty/samples/new_fax.all/INSTALL A file whose name suggests that it contains installation instructions is included in the package. Such instructions are often not relevant for already installed packages. sendfax.armv7hl: E: file-parent-ownership-mismatch Path "/var/spool/fax/incoming" owned by "root" is stored in directory owned by "fax" A file or directory is stored in a directory owned by another unprivileged user. This is a security issue since the owner of the parent directory can replace this file/directory with a different one. mgetty.armv7hl: W: bin-sh-syntax-error /usr/share/doc/packages/mgetty/samples/new_fax.pbm A /bin/sh shell script contains a POSIX shell syntax error. This might indicate a potential bash-specific feature being used, try dash -n for more detailed error message. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BashismsCheck 1.2 54.3 BinariesCheck 0.6 28.3 ExtractRpm 0.2 10.1 TOTAL 2.2 100.0 4 packages and 0 specfiles checked; 6 errors, 11 warnings, 32 filtered, 6 badness; has taken 2.2 s