============================ rpmlint session starts ============================ rpmlint: 2.8.0 configuration: /opt/testing/lib64/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 64 gnunet.aarch64: W: potential-bashisms /usr/bin/gnunet-bugreport checkbashisms reported potential bashisms in a /bin/sh shell script, you might want to manually check this script for bashisms. gnunet.spec: W: no-%check-section The spec file does not contain an %check section. Please check if the package has a testsuite and what it takes to enable the testsuite as part of the package build. If it is not possible to run it in the build environment (OBS/koji) or no testsuite exists, then please ignore this warning. You should not insert an empty %check section. libgnunetutil18.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib64/libgnunetutil.so.18.0.0 This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. gnunet.aarch64: E: invalid-desktopfile /usr/share/applications/gnunet-uri.desktop The .desktop file is not valid, check with desktop-file-validate gnunet.aarch64: E: call-to-mktemp /usr/lib64/gnunet/libgnunet_plugin_datacache_sqlite.so libgnunetdatacache0.aarch64: E: call-to-mktemp /usr/lib64/libgnunetdatacache.so.0.0.1 libgnunetfs2.aarch64: E: call-to-mktemp /usr/lib64/libgnunetfs.so.2.1.1 libgnunetutil18.aarch64: E: call-to-mktemp /usr/lib64/libgnunetutil.so.18.0.0 This executable calls mktemp. As advised by the manpage (mktemp(3)), this function should be avoided. libnss_gns2.aarch64: W: binary-or-shlib-calls-gethostbyname /usr/lib64/libnss_gns.so.2 libnss_gns4-2.aarch64: W: binary-or-shlib-calls-gethostbyname /usr/lib64/libnss_gns4.so.2 libnss_gns6-2.aarch64: W: binary-or-shlib-calls-gethostbyname /usr/lib64/libnss_gns6.so.2 The binary calls gethostbyname. Please port the code to use getaddrinfo. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BinariesCheck 3.7 35.2 ExtractRpm 3.3 31.8 BashismsCheck 1.1 10.6 SharedLibraryPolicyCheck 1.0 9.7 SignatureCheck 0.9 8.3 FilesCheck 0.2 1.5 TOTAL 10.5 100.0 64 packages and 0 specfiles checked; 6 errors, 5 warnings, 136 filtered, 6 badness; has taken 10.6 s