============================ rpmlint session starts ============================ rpmlint: 2.9.0 configuration: /opt/testing/lib64/python3.13/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml /etc/xdg/rpmlint/scoring-strict.override.toml checks: 42, packages: 6 libopenssl3.aarch64: W: tmpfile-not-in-filelist /var/lib/ca-certificates/ libopenssl3.aarch64: W: tmpfile-not-in-filelist /var/lib/ca-certificates/openssl/ Please add the specified file to your %files section as %ghost so users can easily query who created the file, it gets uninstalled on package removal and finally other rpmlint checks see it. openssl-3.aarch64: W: package-with-huge-docs 61% More than half the size of your package is documentation. Consider splitting it into a -doc subpackage. libopenssl-3-devel.aarch64: W: obsolete-not-provided libopenssl-1_0_0-devel libopenssl-3-devel.aarch64: W: obsolete-not-provided libopenssl-1_1_0-devel libopenssl3.aarch64: W: obsolete-not-provided libopenssl-1_0_0-hmac libopenssl3.aarch64: W: obsolete-not-provided libopenssl1_1_0 libopenssl3.aarch64: W: obsolete-not-provided libopenssl1_1_0-hmac openssl-3.aarch64: W: obsolete-not-provided openssl-1_0_0 openssl-3.aarch64: W: obsolete-not-provided openssl-1_1_0 If a package is obsoleted by a compatible replacement, the obsoleted package should also be provided in order to not cause unnecessary dependency breakage. If the obsoleting package is not a compatible replacement for the old one, leave out the Provides. libopenssl3.aarch64: W: hidden-file-or-dir /usr/lib64/.libcrypto.so.3.hmac libopenssl3.aarch64: W: hidden-file-or-dir /usr/lib64/.libssl.so.3.hmac The file or directory is hidden. You should see if this is normal, and delete it from the package if not. libopenssl-3-devel.aarch64: W: files-duplicate /usr/include/openssl/ecdsa.h /usr/include/openssl/ecdh.h libopenssl3.aarch64: W: files-duplicate /etc/ssl/openssl.cnf /etc/ssl/openssl-orig.cnf openssl-3-doc.noarch: W: files-duplicate /usr/share/doc/packages/openssl-3-doc/demos/smime/cacert.pem /usr/share/doc/packages/openssl-3-doc/demos/cms/cacert.pem openssl-3-doc.noarch: W: files-duplicate /usr/share/doc/packages/openssl-3-doc/demos/smime/cakey.pem /usr/share/doc/packages/openssl-3-doc/demos/cms/cakey.pem openssl-3-doc.noarch: W: files-duplicate /usr/share/doc/packages/openssl-3-doc/demos/smime/signer.pem /usr/share/doc/packages/openssl-3-doc/demos/cms/signer.pem openssl-3-doc.noarch: W: files-duplicate /usr/share/doc/packages/openssl-3-doc/demos/smime/signer2.pem /usr/share/doc/packages/openssl-3-doc/demos/cms/signer2.pem Your package contains duplicated files that are not hard- or symlinks. You should use the %fdupes macro to link the files to one. libopenssl3.aarch64: E: env-script-interpreter (Badness: 9) /usr/share/ssl/misc/CA.pl /usr/bin/env perl libopenssl3.aarch64: E: env-script-interpreter (Badness: 9) /usr/share/ssl/misc/tsget.pl /usr/bin/env perl openssl-3.aarch64: E: env-script-interpreter (Badness: 9) /usr/bin/c_rehash /usr/bin/env perl This script uses 'env' as an interpreter. For the rpm runtime dependency detection to work, the shebang #!/usr/bin/env needs to be patched into #!/usr/bin/ otherwise the package dependency generator merely adds a dependency on /usr/bin/env rather than the actual interpreter /usr/bin/. Alternatively, if the file should not be executed, then ensure that it is not marked as executable or don't install it in a path that is reserved for executables. libopenssl3.aarch64: W: binary-or-shlib-calls-gethostbyname /usr/lib64/libcrypto.so.3.5.3 The binary calls gethostbyname. Please port the code to use getaddrinfo. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files ExtractRpm 4.7 60.3 FilesCheck 1.6 20.4 BashismsCheck 0.3 3.7 SignatureCheck 0.3 3.5 BinariesCheck 0.2 2.7 FilelistCheck 0.2 2.7 SharedLibraryPolicyCheck 0.1 1.7 BuildRootAndDateCheck 0.1 1.6 TOTAL 7.9 100.0 6 packages and 0 specfiles checked; 3 errors, 19 warnings, 47 filtered, 27 badness; has taken 8.1 s