============================ rpmlint session starts ============================ rpmlint: 2.7.0 configuration: /opt/testing/lib/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml rpmlintrc: /home/abuild/rpmbuild/SOURCES/ksh-rpmlintrc checks: 41, packages: 3 ksh.src: E: unused-rpmlintrc-filter ".*binary-or-shlib-defines-rpath.*/lib/ast/.*\.so.*" ksh.src: E: unused-rpmlintrc-filter ".*binary-or-shlib-defines-rpath.*/lib/ast/bin/shcomp.*" ksh.src: E: unused-rpmlintrc-filter ".*binary-or-shlib-defines-rpath.*/lib/ast/bin/ksh.*" ksh.src: E: unused-rpmlintrc-filter ".*binary-or-shlib-defines-rpath.*/lib64/ast/.*\.so.*" ksh.src: E: unused-rpmlintrc-filter ".*binary-or-shlib-defines-rpath.*/lib64/ast/bin/shcomp.*" ksh.src: E: unused-rpmlintrc-filter ".*binary-or-shlib-defines-rpath.*/lib64/ast/bin/ksh.*" ksh.src: E: unused-rpmlintrc-filter ".*suse-filelist-forbidden-devel-in-lib.*/lib/ast/.*\.so.*" ksh.src: E: unused-rpmlintrc-filter ".*suse-filelist-forbidden-devel-in-lib.*/lib64/ast/.*\.so.*" ksh.src: E: unused-rpmlintrc-filter ".*devel-file-in-non-devel-package.*/lib64/ast/.*\.so" ksh.src: E: unused-rpmlintrc-filter ".*no-rpm-opt-flags.*ldtest.c.*" ksh.src: E: unused-rpmlintrc-filter ".*invalid-suse-version-check.*" ksh.src: E: unused-rpmlintrc-filter ".*obsolete-suse-version-check.*" ksh.spec:919: W: shared-dir-glob-in-files %{_bindir}/* The %files section contains "%{_bindir}/*", "%{_datadir}/*", "%{_docdir}/*", "%{_includedir}/*" or "%{_mandir}/*". These can lead to packagers not noticing when upstream adds new and possibly conflicting files in these directories. Therefore, files in these directories should be explicitely listed like "%{_bindir}/foobar" or "%{_includedir}/foobar.h". ksh.armv6hl: I: package-supports-libalternatives ksh.spec: W: no-%check-section The spec file does not contain an %check section. Please check if the package has a testsuite and what it takes to enable the testsuite as part of the package build. If it is not possible to run it in the build environment (OBS/koji) or no testsuite exists, then please ignore this warning. You should not insert an empty %check section. ksh.armv6hl: E: missing-call-to-setgroups-before-setuid /usr/lib/ast/libast.so.5.4 ksh.armv6hl: E: missing-call-to-setgroups-before-setuid /usr/lib/ast/libshell.so.1.1 This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. ksh.spec:409: W: macro-in-comment %{libdir} ksh.spec:410: W: macro-in-comment %{libdir} ksh.spec:411: W: macro-in-comment %{libdir} There is a unescaped macro after a shell style comment in the specfile. Macros are expanded everywhere, so check if it can cause a problem in this case and escape the macro with another leading % if appropriate. ksh.armv6hl: E: call-to-mktemp /usr/lib/ast/libast.so.5.4 ksh.armv6hl: E: call-to-mktemp /usr/lib/ast/libcmd.so.1.2 ksh.armv6hl: E: call-to-mktemp /usr/lib/ast/libshell.so.1.1 ksh-devel.armv6hl: E: call-to-mktemp /usr/lib/ast/libast.a ksh-devel.armv6hl: E: call-to-mktemp /usr/lib/ast/libcmd.a This executable calls mktemp. As advised by the manpage (mktemp(3)), this function should be avoided. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files ExtractRpm 1.1 57.4 BinariesCheck 0.5 27.1 TOTAL 2.0 100.0 3 packages and 0 specfiles checked; 19 errors, 5 warnings, 19 filtered, 19 badness; has taken 2.0 s