============================ rpmlint session starts ============================ rpmlint: 2.8.0 configuration: /opt/testing/lib/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 42, packages: 6 binutils.i586: W: zero-perms-ghost Suggestion: "%ghost %attr(0644,root,root) /etc/alternatives/ld" Your package contains a file with no permissions. This is usually an error because the file won't be accessible by any user. You should check the file permissions and ensure that are correct or fix it using "%attr" macro in %files section. http://ftp.rpm.org/max-rpm/s1-rpm-anywhere-specifying-file-attributes.html binutils.i586: E: update-alternatives-postun-call-missing The package does not call update-alternatives --remove in postun phase to remove all the configuration for each individual --install binary that was done in postun. binutils.spec:727: W: shared-dir-glob-in-files %{_bindir}/* The %files section contains "%{_bindir}/*", "%{_datadir}/*", "%{_docdir}/*", "%{_includedir}/*" or "%{_mandir}/*". These can lead to packagers not noticing when upstream adds new and possibly conflicting files in these directories. Therefore, files in these directories should be explicitely listed like "%{_bindir}/foobar" or "%{_includedir}/foobar.h". binutils.i586: I: package-supports-update-alternatives binutils.spec:193: E: obsolete-suse-version-check 1310 The specfile contains a comparison of %suse_version against a suse release that is no longer in maintenance. Consider removing obsolete parts of your spec file to make it more readable. binutils.i586: W: name-repeated-in-summary Binutils binutils.src: W: name-repeated-in-summary Binutils The name of the package is repeated in its summary. Make the summary brief and to the point without including redundant information in it. gprofng.i586: E: missing-call-to-setgroups-before-setuid /usr/lib/gprofng/libgp-collector.so This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. binutils.spec:194: W: macro-in-comment %ix86 binutils.spec:194: W: macro-in-comment %arm binutils.spec:194: W: macro-in-comment %x86_64 binutils.spec:194: W: macro-in-comment %sparc binutils.spec:430: W: macro-in-comment %{suse_version} binutils.spec:432: W: macro-in-comment %endif There is a unescaped macro after a shell style comment in the specfile. Macros are expanded everywhere, so check if it can cause a problem in this case and escape the macro with another leading % if appropriate. binutils.i586: E: filelist-forbidden-fhs23 /usr/i586-suse-linux File violates FHS 2.3. binutils.i586: E: env-script-interpreter (Badness: 9) /usr/bin/gprofng-display-html /usr/bin/env perl This script uses 'env' as an interpreter. For the rpm runtime dependency detection to work, the shebang #!/usr/bin/env needs to be patched into #!/usr/bin/ otherwise the package dependency generator merely adds a dependency on /usr/bin/env rather than the actual interpreter /usr/bin/. Alternatively, if the file should not be executed, then ensure that it is not marked as executable or don't install it in a path that is reserved for executables. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files ExtractRpm 6.5 44.2 SUIDPermissionsCheck 2.6 17.8 BinariesCheck 2.0 13.8 FilesCheck 1.0 6.7 BashismsCheck 0.7 4.7 BuildRootAndDateCheck 0.5 3.4 SpecCheck 0.4 2.7 FilelistCheck 0.3 2.3 SignatureCheck 0.3 1.8 TOTAL 14.7 100.0 6 packages and 0 specfiles checked; 5 errors, 10 warnings, 586 filtered, 13 badness; has taken 14.9 s