============================ rpmlint session starts ============================ rpmlint: 2.8.0 configuration: /opt/testing/lib64/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml rpmlintrc: /home/abuild/rpmbuild/SOURCES/monitoring-plugins-rpmlintrc checks: 41, packages: 61 monitoring-plugins.aarch64: W: self-obsoletion nagios-plugins <= 2.4.0 obsoletes nagios-plugins = 1.5 The package obsoletes itself. This is known to cause errors in various tools and should thus be avoided, usually by using appropriately versioned Obsoletes and/or Provides and avoiding unversioned ones. monitoring-plugins.aarch64: W: package-with-huge-docs 80% More than half the size of your package is documentation. Consider splitting it into a -doc subpackage. monitoring-plugins.aarch64: E: no-binary monitoring-plugins-all.aarch64: E: no-binary monitoring-plugins-breeze.aarch64: E: no-binary monitoring-plugins-cups.aarch64: E: no-binary monitoring-plugins-dbi-mysql.aarch64: E: no-binary monitoring-plugins-dbi-pgsql.aarch64: E: no-binary monitoring-plugins-dbi-sqlite3.aarch64: E: no-binary monitoring-plugins-disk_smb.aarch64: E: no-binary monitoring-plugins-extras.aarch64: E: no-binary monitoring-plugins-file_age.aarch64: E: no-binary monitoring-plugins-flexlm.aarch64: E: no-binary monitoring-plugins-ifoperstatus.aarch64: E: no-binary monitoring-plugins-ifstatus.aarch64: E: no-binary monitoring-plugins-ircd.aarch64: E: no-binary monitoring-plugins-log.aarch64: E: no-binary monitoring-plugins-mailq.aarch64: E: no-binary monitoring-plugins-oracle.aarch64: E: no-binary monitoring-plugins-rpc.aarch64: E: no-binary monitoring-plugins-sensors.aarch64: E: no-binary monitoring-plugins-uptime.aarch64: E: no-binary monitoring-plugins-wave.aarch64: E: no-binary The package should be of the noarch architecture because it doesn't contain any binaries. monitoring-plugins-by_ssh.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_by_ssh monitoring-plugins-cluster.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_cluster monitoring-plugins-curl.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_curl monitoring-plugins-dbi.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_dbi monitoring-plugins-dhcp.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_dhcp monitoring-plugins-dig.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_dig monitoring-plugins-disk.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_disk monitoring-plugins-dns.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_dns monitoring-plugins-fping.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_fping monitoring-plugins-hpjd.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_hpjd monitoring-plugins-http.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_http monitoring-plugins-icmp.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_icmp monitoring-plugins-ide_smart.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ide_smart monitoring-plugins-ldap.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ldap monitoring-plugins-load.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_load monitoring-plugins-mrtg.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_mrtg monitoring-plugins-mrtgtraf.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_mrtgtraf monitoring-plugins-mysql.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_mysql monitoring-plugins-mysql.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_mysql_query monitoring-plugins-nagios.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_nagios monitoring-plugins-nt.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_nt monitoring-plugins-ntp_peer.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ntp_peer monitoring-plugins-ntp_time.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ntp monitoring-plugins-ntp_time.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ntp_time monitoring-plugins-nwstat.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_nwstat monitoring-plugins-overcr.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_overcr monitoring-plugins-pgsql.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_pgsql monitoring-plugins-ping.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ping monitoring-plugins-procs.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_procs monitoring-plugins-radius.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_radius monitoring-plugins-real.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_real monitoring-plugins-smtp.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_smtp monitoring-plugins-snmp.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_snmp monitoring-plugins-ssh.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ssh monitoring-plugins-swap.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_swap monitoring-plugins-tcp.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_tcp monitoring-plugins-time.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_time monitoring-plugins-ups.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ups monitoring-plugins-users.aarch64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_users This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. monitoring-plugins-common.aarch64: W: ghost-files-without-postin Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files ExtractRpm 1.5 30.5 BinariesCheck 1.2 24.9 BashismsCheck 1.0 20.7 SignatureCheck 0.6 13.1 TagsCheck 0.3 6.7 TOTAL 4.8 100.0 61 packages and 0 specfiles checked; 60 errors, 3 warnings, 143 filtered, 60 badness; has taken 4.9 s