============================ rpmlint session starts ============================ rpmlint: 2.8.0 configuration: /opt/testing/lib64/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml rpmlintrc: /home/abuild/rpmbuild/SOURCES/monitoring-plugins-rpmlintrc checks: 41, packages: 61 monitoring-plugins.x86_64: W: self-obsoletion nagios-plugins <= 2.4.0 obsoletes nagios-plugins = 1.5 The package obsoletes itself. This is known to cause errors in various tools and should thus be avoided, usually by using appropriately versioned Obsoletes and/or Provides and avoiding unversioned ones. monitoring-plugins.x86_64: W: package-with-huge-docs 80% monitoring-plugins-common.x86_64: W: package-with-huge-docs 60% More than half the size of your package is documentation. Consider splitting it into a -doc subpackage. monitoring-plugins.x86_64: E: no-binary monitoring-plugins-all.x86_64: E: no-binary monitoring-plugins-breeze.x86_64: E: no-binary monitoring-plugins-cups.x86_64: E: no-binary monitoring-plugins-dbi-mysql.x86_64: E: no-binary monitoring-plugins-dbi-pgsql.x86_64: E: no-binary monitoring-plugins-dbi-sqlite3.x86_64: E: no-binary monitoring-plugins-disk_smb.x86_64: E: no-binary monitoring-plugins-extras.x86_64: E: no-binary monitoring-plugins-file_age.x86_64: E: no-binary monitoring-plugins-flexlm.x86_64: E: no-binary monitoring-plugins-ifoperstatus.x86_64: E: no-binary monitoring-plugins-ifstatus.x86_64: E: no-binary monitoring-plugins-ircd.x86_64: E: no-binary monitoring-plugins-log.x86_64: E: no-binary monitoring-plugins-mailq.x86_64: E: no-binary monitoring-plugins-oracle.x86_64: E: no-binary monitoring-plugins-rpc.x86_64: E: no-binary monitoring-plugins-sensors.x86_64: E: no-binary monitoring-plugins-uptime.x86_64: E: no-binary monitoring-plugins-wave.x86_64: E: no-binary The package should be of the noarch architecture because it doesn't contain any binaries. monitoring-plugins-by_ssh.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_by_ssh monitoring-plugins-cluster.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_cluster monitoring-plugins-curl.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_curl monitoring-plugins-dbi.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_dbi monitoring-plugins-dhcp.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_dhcp monitoring-plugins-dig.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_dig monitoring-plugins-disk.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_disk monitoring-plugins-dns.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_dns monitoring-plugins-fping.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_fping monitoring-plugins-hpjd.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_hpjd monitoring-plugins-http.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_http monitoring-plugins-icmp.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_icmp monitoring-plugins-ide_smart.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ide_smart monitoring-plugins-ldap.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ldap monitoring-plugins-load.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_load monitoring-plugins-mrtg.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_mrtg monitoring-plugins-mrtgtraf.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_mrtgtraf monitoring-plugins-mysql.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_mysql monitoring-plugins-mysql.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_mysql_query monitoring-plugins-nagios.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_nagios monitoring-plugins-nt.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_nt monitoring-plugins-ntp_peer.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ntp_peer monitoring-plugins-ntp_time.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ntp monitoring-plugins-ntp_time.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ntp_time monitoring-plugins-nwstat.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_nwstat monitoring-plugins-overcr.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_overcr monitoring-plugins-pgsql.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_pgsql monitoring-plugins-ping.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ping monitoring-plugins-procs.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_procs monitoring-plugins-radius.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_radius monitoring-plugins-real.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_real monitoring-plugins-smtp.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_smtp monitoring-plugins-snmp.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_snmp monitoring-plugins-ssh.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ssh monitoring-plugins-swap.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_swap monitoring-plugins-tcp.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_tcp monitoring-plugins-time.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_time monitoring-plugins-ups.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_ups monitoring-plugins-users.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib/nagios/plugins/check_users This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. monitoring-plugins-common.x86_64: W: ghost-files-without-postin Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BashismsCheck 1.4 45.7 ExtractRpm 0.6 20.8 SignatureCheck 0.4 12.6 BinariesCheck 0.4 11.9 TagsCheck 0.1 4.4 TOTAL 3.1 100.0 61 packages and 0 specfiles checked; 60 errors, 4 warnings, 143 filtered, 60 badness; has taken 3.1 s