============================ rpmlint session starts ============================ rpmlint: 2.8.0 configuration: /opt/testing/lib/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 4 inn.armv7hl: E: zero-length /var/lib/news/active.times inn.armv7hl: E: zero-length /var/lib/news/history inn.armv7hl: E: zero-length /var/lib/news/history.pag inn.armv7hl: W: tmpfile-not-in-filelist /run/news Please add the specified file to your %files section as %ghost so users can easily query who created the file, it gets uninstalled on package removal and finally other rpmlint checks see it. inn.armv7hl: E: script-without-shebang /etc/news/innshellvars.local inn.armv7hl: E: script-without-shebang /etc/news/innshellvars.pl.local inn.armv7hl: E: script-without-shebang /etc/news/innshellvars.tcl.local This text file has executable bits set or is located in a path dedicated for executables, but lacks a shebang and cannot thus be executed. If the file is meant to be an executable script, add the shebang, otherwise remove the executable bits or move the file elsewhere. inn.armv7hl: W: potential-bashisms /usr/libexec/news/bin/convertspool inn.armv7hl: W: potential-bashisms /usr/libexec/news/bin/news.daily inn.armv7hl: W: potential-bashisms /usr/libexec/news/bin/send-nntp checkbashisms reported potential bashisms in a /bin/sh shell script, you might want to manually check this script for bashisms. inn.armv7hl: W: post-without-tmpfile-creation /usr/lib/tmpfiles.d/inn.conf Please use the %tmpfiles_create macro in %post for each of your tmpfiles.d files if you expect this file or directory to be available after package installation (and before reboot). inn.armv7hl: E: non-executable-script /usr/libexec/news/bin/filter/nnrpd_access.pl 644 /usr/bin/perl -w inn.armv7hl: E: non-executable-script /usr/libexec/news/bin/filter/nnrpd_auth.pl 644 /usr/bin/perl -w inn.armv7hl: E: non-executable-script /usr/libexec/news/lib/innshellvars 644 /bin/sh This text file contains a shebang or is located in a path dedicated for executables, but lacks the executable bits and cannot thus be executed. If the file is meant to be an executable script, add the executable bits, otherwise remove the shebang or move the file elsewhere. inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/INN.py inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/filter_innd.pl inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/filter_innd.py inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/filter_nnrpd.pl inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/nnrpd.py inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/nnrpd_access.pl inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/nnrpd_access.py inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/nnrpd_auth.pl inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/nnrpd_auth.py inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/nnrpd_dynamic.py inn.armv7hl: W: non-etc-or-var-file-marked-as-conffile /usr/libexec/news/bin/filter/startup_innd.pl A file not in /etc or /var is marked as being a configuration file (%config). Please put your configuration files in /etc or /var. inn.spec: W: no-%check-section The spec file does not contain an %check section. Please check if the package has a testsuite and what it takes to enable the testsuite as part of the package build. If it is not possible to run it in the build environment (OBS/koji) or no testsuite exists, then please ignore this warning. You should not insert an empty %check section. inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/expire inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/expireover inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/innd inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/makedbz inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/makehistory inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/nnrpd inn.armv7hl: E: missing-call-to-setgroups-before-setuid /usr/libexec/news/bin/tdx-util This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. inn.armv7hl: W: install-file-in-docs /usr/share/doc/packages/inn/INSTALL A file whose name suggests that it contains installation instructions is included in the package. Such instructions are often not relevant for already installed packages. inn.armv7hl: W: hidden-file-or-dir /etc/news/.pgp inn.armv7hl: W: hidden-file-or-dir /etc/news/.pgp inn.armv7hl: W: hidden-file-or-dir /etc/news/.profile The file or directory is hidden. You should see if this is normal, and delete it from the package if not. inn.armv7hl: W: binary-or-shlib-calls-gethostbyname /usr/libexec/news/bin/auth/passwd/radius inn.armv7hl: W: binary-or-shlib-calls-gethostbyname /usr/libexec/news/bin/imapfeed The binary calls gethostbyname. Please port the code to use getaddrinfo. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BashismsCheck 2.8 48.0 BinariesCheck 1.3 22.5 ExtractRpm 1.3 21.8 FilesCheck 0.1 1.8 SignatureCheck 0.1 1.7 TOTAL 5.9 100.0 4 packages and 0 specfiles checked; 16 errors, 23 warnings, 168 filtered, 16 badness; has taken 6.0 s