============================ rpmlint session starts ============================ rpmlint: 2.7.0 configuration: /opt/testing/lib/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 8 sudo.armv7hl: W: wrong-file-end-of-line-encoding /usr/share/doc/packages/sudo/schema.ActiveDirectory This file has wrong end-of-line encoding, usually caused by creation or modification on a non-Unix system. It could prevent it from being displayed correctly in some circumstances. sudo-test.armv7hl: E: script-without-shebang /var/lib/tests/sudo/README_313276.test This text file has executable bits set or is located in a path dedicated for executables, but lacks a shebang and cannot thus be executed. If the file is meant to be an executable script, add the shebang, otherwise remove the executable bits or move the file elsewhere. sudo.armv7hl: W: permissions-missing-verifyscript missing %verify_permissions -e /usr/bin/sudo Please add a %verifyscript section sudo.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/etc/sudo.conf sudo.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/etc/sudo_logsrvd.conf A file not in /etc or /var is marked as being a configuration file (%config). Please put your configuration files in /etc or /var. sudo-devel.armv7hl: E: no-binary sudo-policy-sudo-auth-self.armv7hl: E: no-binary sudo-policy-wheel-auth-self.armv7hl: E: no-binary sudo-test.armv7hl: E: no-binary system-group-sudo.armv7hl: E: no-binary The package should be of the noarch architecture because it doesn't contain any binaries. sudo.spec: W: no-%check-section The spec file does not contain an %check section. Please check if the package has a testsuite and what it takes to enable the testsuite as part of the package build. If it is not possible to run it in the build environment (OBS/koji) or no testsuite exists, then please ignore this warning. You should not insert an empty %check section. sudo.armv7hl: W: missing-call-to-setgroups-before-setuid /usr/bin/sudo sudo.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/bin/sudoreplay sudo.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/sudo/sesh sudo.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/sudo/sudo/sudoers.so sudo.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/sbin/sudo_logsrvd sudo.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/sbin/sudo_sendlog This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files ExtractRpm 0.8 50.4 BinariesCheck 0.3 18.1 SpecCheck 0.1 7.0 BashismsCheck 0.1 6.8 SignatureCheck 0.1 6.8 TOTAL 1.5 100.0 8 packages and 0 specfiles checked; 11 errors, 6 warnings, 33 filtered, 11 badness; has taken 1.6 s