============================ rpmlint session starts ============================ rpmlint: 2.7.0 configuration: /opt/testing/lib64/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 41, packages: 4 slang.spec:36: E: obsolete-suse-version-check 1210 The specfile contains a comparison of %suse_version against a suse release that is no longer in maintenance. Consider removing obsolete parts of your spec file to make it more readable. libslang2.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib64/libslang.so.2.3.4 This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. slang-devel.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/doc/packages/slang-devel/examples/prime.sl /usr/bin/env slsh slang-devel.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/doc/packages/slang-devel/examples/sort.sl /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/jpegsize /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/lsrpm /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/slcov /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/sldb /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/slprof /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/slstkchk /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/svnsh /usr/bin/env slsh This script uses 'env' as an interpreter. For the rpm runtime dependency detection to work, the shebang #!/usr/bin/env needs to be patched into #!/usr/bin/ otherwise the package dependency generator merely adds a dependency on /usr/bin/env rather than the actual interpreter /usr/bin/. Alternatively, if the file should not be executed, then ensure that it is not marked as executable or don't install it in a path that is reserved for executables. slang-slsh.x86_64: W: binary-or-shlib-calls-gethostbyname /usr/lib64/slang/v2/modules/socket-module.so The binary calls gethostbyname. Please port the code to use getaddrinfo. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BinariesCheck 0.3 40.4 ExtractRpm 0.3 37.3 TOTAL 0.8 100.0 4 packages and 0 specfiles checked; 11 errors, 1 warnings, 12 filtered, 83 badness; has taken 0.8 s