============================ rpmlint session starts ============================ rpmlint: 2.5.0 configuration: /opt/testing/lib64/python3.11/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml checks: 41, packages: 4 libslang2.x86_64: W: unstripped-binary-or-object /usr/lib64/libslang.so.2.3.3 slang-slsh.x86_64: W: unstripped-binary-or-object /usr/bin/slsh slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/base64-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/chksum-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/csv-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/fcntl-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/fork-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/histogram-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/iconv-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/json-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/onig-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/pcre-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/png-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/rand-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/select-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/slsmg-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/socket-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/stats-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/sysconf-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/termios-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/varray-module.so slang-slsh.x86_64: W: unstripped-binary-or-object /usr/lib64/slang/v2/modules/zlib-module.so This executable should be stripped from debugging symbols, in order to take less space and be loaded faster. This is usually done automatically at buildtime by rpm. slang.spec:38: E: obsolete-suse-version-check 1210 The specfile contains a comparison of %suse_version against a suse release that is no longer in maintenance. Consider removing obsolete parts of your spec file to make it more readable. libslang2.x86_64: E: missing-call-to-setgroups-before-setuid /usr/lib64/libslang.so.2.3.3 This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. slang-devel.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/doc/packages/slang-devel/examples/prime.sl /usr/bin/env slsh slang-devel.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/doc/packages/slang-devel/examples/sort.sl /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/jpegsize /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/lsrpm /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/slcov /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/sldb /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/slprof /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/slstkchk /usr/bin/env slsh slang-slsh.x86_64: E: env-script-interpreter (Badness: 9) /usr/share/slsh/scripts/svnsh /usr/bin/env slsh This script uses 'env' as an interpreter. For the rpm runtime dependency detection to work, the shebang #!/usr/bin/env needs to be patched into #!/usr/bin/ otherwise the package dependency generator merely adds a dependency on /usr/bin/env rather than the actual interpreter /usr/bin/. Alternatively, if the file should not be executed, then ensure that it is not marked as executable or don't install it in a path that is reserved for executables. slang-slsh.x86_64: W: binary-or-shlib-calls-gethostbyname /usr/lib64/slang/v2/modules/socket-module.so The binary calls gethostbyname. Please port the code to use getaddrinfo. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BinariesCheck 0.2 55.0 TOTAL 0.3 100.0 4 packages and 0 specfiles checked; 11 errors, 23 warnings, 16 filtered, 83 badness; has taken 0.3 s