============================ rpmlint session starts ============================ rpmlint: 2.8.0 configuration: /opt/testing/lib64/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 3 argyllcms.spec:132: W: shared-dir-glob-in-files %{_bindir}/* The %files section contains "%{_bindir}/*", "%{_datadir}/*", "%{_docdir}/*", "%{_includedir}/*" or "%{_mandir}/*". These can lead to packagers not noticing when upstream adds new and possibly conflicting files in these directories. Therefore, files in these directories should be explicitely listed like "%{_bindir}/foobar" or "%{_includedir}/foobar.h". argyllcms.x86_64: E: script-without-shebang /usr/bin/com.argyllcms.metainfo.xml This text file has executable bits set or is located in a path dedicated for executables, but lacks a shebang and cannot thus be executed. If the file is meant to be an executable script, add the shebang, otherwise remove the executable bits or move the file elsewhere. argyllcms.spec: W: no-%check-section The spec file does not contain an %check section. Please check if the package has a testsuite and what it takes to enable the testsuite as part of the package build. If it is not possible to run it in the build environment (OBS/koji) or no testsuite exists, then please ignore this warning. You should not insert an empty %check section. argyllcms.x86_64: E: missing-call-to-setgroups-before-setuid /usr/bin/ccxxmake argyllcms.x86_64: E: missing-call-to-setgroups-before-setuid /usr/bin/chartread argyllcms.x86_64: E: missing-call-to-setgroups-before-setuid /usr/bin/dispcal argyllcms.x86_64: E: missing-call-to-setgroups-before-setuid /usr/bin/dispread argyllcms.x86_64: E: missing-call-to-setgroups-before-setuid /usr/bin/dispwin argyllcms.x86_64: E: missing-call-to-setgroups-before-setuid /usr/bin/illumread argyllcms.x86_64: E: missing-call-to-setgroups-before-setuid /usr/bin/oeminst argyllcms.x86_64: E: missing-call-to-setgroups-before-setuid /usr/bin/spotread This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. argyllcms.x86_64: W: files-duplicate /usr/share/doc/packages/argyllcms/License.txt /usr/share/color/argyll/ref/License.txt Your package contains duplicated files that are not hard- or symlinks. You should use the %fdupes macro to link the files to one. argyllcms.x86_64: W: binary-or-shlib-calls-gethostbyname /usr/bin/ccxxmake argyllcms.x86_64: W: binary-or-shlib-calls-gethostbyname /usr/bin/dispcal argyllcms.x86_64: W: binary-or-shlib-calls-gethostbyname /usr/bin/dispread argyllcms.x86_64: W: binary-or-shlib-calls-gethostbyname /usr/bin/dispwin The binary calls gethostbyname. Please port the code to use getaddrinfo. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files ExtractRpm 4.3 82.0 BinariesCheck 0.5 9.8 ZipCheck 0.2 3.6 TOTAL 5.2 100.0 3 packages and 0 specfiles checked; 9 errors, 7 warnings, 57 filtered, 9 badness; has taken 5.2 s