============================ rpmlint session starts ============================ rpmlint: 2.8.0 configuration: /opt/testing/lib64/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 5 cdparanoia-devel.aarch64: E: summary-too-long (Badness: 200) Development files for cdparanoia, a library for extractnig audio tracks from CDs The 'Summary:' must not exceed 79 characters. libcdda_interface0.aarch64: E: shared-library-not-executable /usr/lib64/libcdda_interface.so.0.10.2 libcdda_paranoia0.aarch64: E: shared-library-not-executable /usr/lib64/libcdda_paranoia.so.0.10.2 This library doesn't have the executable bit set. Without this bit set, rpm for instance won't be able identify the file as a library and not generate dependencies or strip debug symbols from it. cdparanoia.spec:117: W: shared-dir-glob-in-files %{_bindir}/* cdparanoia.spec:130: W: shared-dir-glob-in-files %{_includedir}/* The %files section contains "%{_bindir}/*", "%{_datadir}/*", "%{_docdir}/*", "%{_includedir}/*" or "%{_mandir}/*". These can lead to packagers not noticing when upstream adds new and possibly conflicting files in these directories. Therefore, files in these directories should be explicitely listed like "%{_bindir}/foobar" or "%{_includedir}/foobar.h". cdparanoia.spec: W: no-%check-section The spec file does not contain an %check section. Please check if the package has a testsuite and what it takes to enable the testsuite as part of the package build. If it is not possible to run it in the build environment (OBS/koji) or no testsuite exists, then please ignore this warning. You should not insert an empty %check section. cdparanoia.aarch64: E: missing-call-to-setgroups-before-setuid /usr/bin/cdparanoia This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files ExtractRpm 0.2 51.2 TOTAL 0.4 100.0 5 packages and 0 specfiles checked; 4 errors, 3 warnings, 15 filtered, 203 badness; has taken 0.4 s