============================ rpmlint session starts ============================ rpmlint: 2.8.0 configuration: /opt/testing/lib64/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 42, packages: 10 tigervnc-selinux.noarch: W: zero-perms-ghost Suggestion: "%ghost %attr(0644,root,root) /var/lib/selinux/targeted/active/modules/200/vncsession" Your package contains a file with no permissions. This is usually an error because the file won't be accessible by any user. You should check the file permissions and ensure that are correct or fix it using "%attr" macro in %files section. http://ftp.rpm.org/max-rpm/s1-rpm-anywhere-specifying-file-attributes.html tigervnc-selinux.noarch: E: spurious-executable-perm (Badness: 50) /usr/share/selinux/packages/targeted/vncsession.pp.bz2 The file is installed with executable permissions, but was identified as one that probably should not be executable. Verify if the executable bits are desired, and remove if not. tigervnc.spec: W: no-%check-section The spec file does not contain an %check section. Please check if the package has a testsuite and what it takes to enable the testsuite as part of the package build. If it is not possible to run it in the build environment (OBS/koji) or no testsuite exists, then please ignore this warning. You should not insert an empty %check section. xorg-x11-Xvnc.aarch64: E: missing-call-to-setgroups-before-setuid /usr/bin/Xvnc This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. tigervnc.aarch64: E: invalid-desktopfile /usr/share/applications/vncviewer.desktop The .desktop file is not valid, check with desktop-file-validate tigervnc-selinux.noarch: E: explicit-lib-dependency libselinux-utils You must let rpm find the library dependencies by itself. Do not put unneeded explicit Requires: tags. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files ExtractRpm 0.9 47.3 BinariesCheck 0.4 20.7 BashismsCheck 0.2 9.6 SignatureCheck 0.2 9.1 TOTAL 1.9 100.0 10 packages and 0 specfiles checked; 4 errors, 2 warnings, 43 filtered, 53 badness; has taken 1.9 s