ghc-bootstrap.armv7hl: W: devel-dependency gmp-devel Your package has a dependency on a devel package but it's not a devel package itself. ghc-bootstrap.armv7hl: W: explicit-lib-dependency libncurses5 You must let rpm find the library dependencies by itself. Do not put unneeded explicit Requires: tags. ghc-bootstrap.armv7hl: W: missing-call-to-setgroups-before-setuid /opt/lib/ghc-8.6.5/bin/ghc-pkg ghc-bootstrap.armv7hl: W: missing-call-to-setgroups-before-setuid /opt/lib/ghc-8.6.5/bin/hsc2hs This executable is calling setuid and setgid without setgroups or initgroups. There is a high probability this means it didn't relinquish all groups, and this would be a potential security issue to be fixed. Seek POS36-C on the web for details about the problem. ghc-bootstrap.armv7hl: W: no-version-in-last-changelog ghc-bootstrap.src: W: no-version-in-last-changelog The latest changelog entry doesn't contain a version. Please insert the version that is coherent with the version of the package and rebuild it. ghc-bootstrap.armv7hl: W: position-independent-executable-suggested /opt/lib/ghc-8.6.5/bin/ghc ghc-bootstrap.armv7hl: W: position-independent-executable-suggested /opt/lib/ghc-8.6.5/bin/ghc-iserv ghc-bootstrap.armv7hl: W: position-independent-executable-suggested /opt/lib/ghc-8.6.5/bin/ghc-pkg ghc-bootstrap.armv7hl: W: position-independent-executable-suggested /opt/lib/ghc-8.6.5/bin/hp2ps ghc-bootstrap.armv7hl: W: position-independent-executable-suggested /opt/lib/ghc-8.6.5/bin/hpc ghc-bootstrap.armv7hl: W: position-independent-executable-suggested /opt/lib/ghc-8.6.5/bin/hsc2hs ghc-bootstrap.armv7hl: W: position-independent-executable-suggested /opt/lib/ghc-8.6.5/bin/runghc ghc-bootstrap.armv7hl: W: position-independent-executable-suggested /opt/lib/ghc-8.6.5/bin/unlit This executable should be position independent (all binaries should). Check that it is built with -fPIE/-fpie in compiler flags and -pie in linker flags. ghc-bootstrap.armv7hl: W: standard-dir-owned-by-package /opt This package owns a directory that is part of the standard hierarchy, which can lead to default directory permissions or ownerships being changed to something non-standard. ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/Cabal-2.4.0.1/libHSCabal-2.4.0.1.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/array-0.5.3.0/libHSarray-0.5.3.0.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/base-4.12.0.0/libHSbase-4.12.0.0.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/binary-0.8.6.0/libHSbinary-0.8.6.0.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/bytestring-0.10.8.2/libHSbytestring-0.10.8.2.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/containers-0.6.0.1/libHScontainers-0.6.0.1.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/deepseq-1.4.4.0/libHSdeepseq-1.4.4.0.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/directory-1.3.3.0/libHSdirectory-1.3.3.0.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/filepath-1.4.2.1/libHSfilepath-1.4.2.1.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/ghc-8.6.5/libHSghc-8.6.5.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/ghc-boot-8.6.5/libHSghc-boot-8.6.5.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/ghc-boot-th-8.6.5/libHSghc-boot-th-8.6.5.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/ghc-compact-0.1.0.0/libHSghc-compact-0.1.0.0.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/ghc-heap-8.6.5/libHSghc-heap-8.6.5.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/ghc-prim-0.5.3/libHSghc-prim-0.5.3.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/ghci-8.6.5/libHSghci-8.6.5.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/haskeline-0.7.4.3/libHShaskeline-0.7.4.3.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/hpc-0.6.0.3/libHShpc-0.6.0.3.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/integer-gmp-1.0.2.0/libHSinteger-gmp-1.0.2.0.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/libiserv-8.6.3/libHSlibiserv-8.6.3.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/mtl-2.2.2/libHSmtl-2.2.2.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/parsec-3.1.13.0/libHSparsec-3.1.13.0.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/pretty-1.1.3.6/libHSpretty-1.1.3.6.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/process-1.6.5.0/libHSprocess-1.6.5.0.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/rts/libCffi.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/stm-2.5.0.0/libHSstm-2.5.0.0.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/template-haskell-2.14.0.0/libHStemplate-haskell-2.14.0.0.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/terminfo-0.4.1.2/libHSterminfo-0.4.1.2.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/text-1.2.3.1/libHStext-1.2.3.1.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/time-1.8.0.2/libHStime-1.8.0.2.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/transformers-0.5.6.2/libHStransformers-0.5.6.2.a ghc-bootstrap.armv7hl: W: static-library-without-debuginfo /opt/lib/ghc-8.6.5/unix-2.7.2.2/libHSunix-2.7.2.2.a The static library doesn't contain any debuginfo. Binaries linking against this static library can't be properly debugged. ghc-bootstrap.armv7hl: W: suse-filelist-forbidden-opt /opt/ is not allowed for official SUSE packages ghc-bootstrap.armv7hl: W: suse-filelist-forbidden-opt /opt/bin is not allowed for official SUSE packages ghc-bootstrap.armv7hl: W: suse-filelist-forbidden-opt /opt/lib is not allowed for official SUSE packages ghc-bootstrap.armv7hl: W: suse-filelist-forbidden-opt /opt/share is not allowed for official SUSE packages /opt may not be used by distribution packages. It is reserved for 3rd party packagers ghc-bootstrap.armv7hl: W: zero-length /opt/lib/ghc-8.6.5/package.conf.d/package.cache.lock 2 packages and 0 specfiles checked; 0 errors, 52 warnings.