============================ rpmlint session starts ============================ rpmlint: 2.5.0 configuration: /opt/testing/lib64/python3.11/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml rpmlintrc: /home/abuild/rpmbuild/SOURCES/mozilla-nss-rpmlintrc checks: 41, packages: 8 mozilla-nss.src: E: unused-rpmlintrc-filter "shlib-policy-name-error" mozilla-nss.src: E: unused-rpmlintrc-filter "shlib-policy-missing-lib" mozilla-nss.src: E: unused-rpmlintrc-filter "shlib-policy-missing-suffix" libfreebl3.x86_64: W: unstripped-binary-or-object /usr/lib64/libfreebl3.so libfreebl3.x86_64: W: unstripped-binary-or-object /usr/lib64/libfreeblpriv3.so libsoftokn3.x86_64: W: unstripped-binary-or-object /usr/lib64/libnssdbm3.so libsoftokn3.x86_64: W: unstripped-binary-or-object /usr/lib64/libsoftokn3.so mozilla-nss.x86_64: W: unstripped-binary-or-object /usr/lib64/libnss3.so mozilla-nss.x86_64: W: unstripped-binary-or-object /usr/lib64/libnssutil3.so mozilla-nss.x86_64: W: unstripped-binary-or-object /usr/lib64/libsmime3.so mozilla-nss.x86_64: W: unstripped-binary-or-object /usr/lib64/libssl3.so mozilla-nss-certs.x86_64: W: unstripped-binary-or-object /usr/lib64/libnssckbi.so mozilla-nss-sysinit.x86_64: W: unstripped-binary-or-object /usr/lib64/libnsssysinit.so mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/bin/certutil mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/bin/cmsutil mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/bin/crlutil mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/bin/modutil mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/bin/nss-policy-check mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/bin/pk12util mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/bin/signtool mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/bin/signver mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/bin/ssltap mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/libexec/nss/atob mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/libexec/nss/btoa mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/libexec/nss/derdump mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/libexec/nss/ocspclnt mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/libexec/nss/pp mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/libexec/nss/selfserv mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/libexec/nss/shlibsign mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/libexec/nss/strsclnt mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/libexec/nss/symkeyutil mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/libexec/nss/tstclnt mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/libexec/nss/vfychain mozilla-nss-tools.x86_64: W: unstripped-binary-or-object /usr/libexec/nss/vfyserv This executable should be stripped from debugging symbols, in order to take less space and be loaded faster. This is usually done automatically at buildtime by rpm. mozilla-nss-devel.x86_64: E: static-library-without-debuginfo /usr/lib64/libcrmf.a mozilla-nss-devel.x86_64: E: static-library-without-debuginfo /usr/lib64/libfreebl.a mozilla-nss-devel.x86_64: E: static-library-without-debuginfo /usr/lib64/libnssb.a mozilla-nss-devel.x86_64: E: static-library-without-debuginfo /usr/lib64/libnssckfw.a The static library doesn't contain any debuginfo. Binaries linking against this static library can't be properly debugged. mozilla-nss-devel.x86_64: E: rpath-in-buildconfig /usr/bin/nss-config lines 129 mozilla-nss-devel.x86_64: E: rpath-in-buildconfig /usr/bin/nss-util-config lines 112 This build configuration file contains rpaths which will be introduced into dependent packages. mozilla-nss.spec:251: W: macro-in-comment %{SOURCE2} mozilla-nss.spec:365: W: macro-in-comment %{buildroot} mozilla-nss.spec:365: W: macro-in-comment %{_libdir} mozilla-nss.spec:442: W: macro-in-comment %{buildroot} mozilla-nss.spec:442: W: macro-in-comment %{_lib} mozilla-nss.spec:442: W: macro-in-comment %{buildroot} mozilla-nss.spec:442: W: macro-in-comment %{_libdir} mozilla-nss.spec:442: W: macro-in-comment %{buildroot} mozilla-nss.spec:442: W: macro-in-comment %{_bindir} mozilla-nss.spec:442: W: macro-in-comment %{buildroot} mozilla-nss.spec:442: W: macro-in-comment %{nssdbdir} mozilla-nss.spec:443: W: macro-in-comment %{buildroot} mozilla-nss.spec:443: W: macro-in-comment %{_lib} mozilla-nss.spec:443: W: macro-in-comment %{buildroot} mozilla-nss.spec:443: W: macro-in-comment %{_libdir} mozilla-nss.spec:443: W: macro-in-comment %{buildroot} mozilla-nss.spec:443: W: macro-in-comment %{_bindir} mozilla-nss.spec:443: W: macro-in-comment %{buildroot} mozilla-nss.spec:443: W: macro-in-comment %{nssdbdir} mozilla-nss.spec:444: W: macro-in-comment %{buildroot} mozilla-nss.spec:444: W: macro-in-comment %{nssdbdir} mozilla-nss.spec:445: W: macro-in-comment %{buildroot} mozilla-nss.spec:448: W: macro-in-comment %{buildroot} mozilla-nss.spec:448: W: macro-in-comment %{nssdbdir} mozilla-nss.spec:448: W: macro-in-comment %{buildroot} mozilla-nss.spec:448: W: macro-in-comment %{nssdbdir} mozilla-nss.spec:449: W: macro-in-comment %{buildroot} mozilla-nss.spec:449: W: macro-in-comment %{nssdbdir} There is a unescaped macro after a shell style comment in the specfile. Macros are expanded everywhere, so check if it can cause a problem in this case and escape the macro with another leading % if appropriate. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BashismsCheck 0.5 27.2 BinariesCheck 0.5 26.5 ExtractRpm 0.3 17.5 SignatureCheck 0.3 17.0 TOTAL 1.8 100.0 8 packages and 0 specfiles checked; 9 errors, 59 warnings, 41 filtered, 9 badness; has taken 1.8 s