============================ rpmlint session starts ============================ rpmlint: 2.9.0 configuration: /opt/testing/lib/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 42, packages: 4 suricata.armv6hl: W: zero-perms-ghost Suggestion: "%ghost %attr(0644,root,root) /var/adm/update-messages/suricata-8.0.5-1.1" suricata.armv6hl: W: zero-perms-ghost Suggestion: "%ghost %attr(0644,root,root) /var/lib/suricata/.migrated-to-nonroot" Your package contains a file with no permissions. This is usually an error because the file won't be accessible by any user. You should check the file permissions and ensure that are correct or fix it using "%attr" macro in %files section. http://ftp.rpm.org/max-rpm/s1-rpm-anywhere-specifying-file-attributes.html suricata.armv6hl: W: non-standard-uid /var/lib/suricata suricata suricata.armv6hl: W: non-standard-uid /var/log/suricata suricata A file in this package is owned by an unregistered user id. To register the user, please make a pull request to the rpmlint config file configs/openSUSE/users-groups.toml in the opensuse branch of the rpmlint repository. suricata.armv6hl: W: non-standard-gid /var/lib/suricata suricata suricata.armv6hl: W: non-standard-gid /var/log/suricata suricata A file in this package is owned by an unregistered group id. To register the group, please make a pull request to the rpmlint config file configs/openSUSE/users-groups.toml in the opensuse branch of the rpmlint repository. suricata.armv6hl: W: non-standard-dir-in-var adm Your package is creating a non-standard subdirectory in /var. The standard directories are: cache, lib, local, lock, log, opt, run, spool, tmp, account, crash, games, mail, yp. suricata-devel.armv6hl: E: no-binary The package should be of the noarch architecture because it doesn't contain any binaries. suricata.spec: W: no-%check-section The spec file does not contain an %check section. Please check if the package has a testsuite and what it takes to enable the testsuite as part of the package build. If it is not possible to run it in the build environment (OBS/koji) or no testsuite exists, then please ignore this warning. You should not insert an empty %check section. suricata.armv6hl: W: hidden-file-or-dir /var/lib/suricata/.migrated-to-nonroot The file or directory is hidden. You should see if this is normal, and delete it from the package if not. suricata.armv6hl: E: file-parent-ownership-mismatch Path "/var/lib/suricata/.migrated-to-nonroot" owned by "root" is stored in directory owned by "suricata" A file or directory is stored in a directory owned by another unprivileged user. This is a security issue since the owner of the parent directory can replace this file/directory with a different one. suricata.armv6hl: W: dir-or-file-outside-snapshot /var/lib/suricata suricata.armv6hl: W: dir-or-file-outside-snapshot /var/log/suricata The package contains files outside the snapshot, e.g. outside /etc and /usr or inside /usr/local. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files ExtractRpm 3.4 67.7 BinariesCheck 0.6 12.2 BashismsCheck 0.2 4.8 SharedLibraryPolicyCheck 0.2 4.5 FilesCheck 0.2 3.9 SignatureCheck 0.2 3.9 TOTAL 5.0 100.0 4 packages and 0 specfiles checked; 2 errors, 11 warnings, 644 filtered, 2 badness; has taken 5.0 s