============================ rpmlint session starts ============================ rpmlint: 2.5.0 configuration: /opt/testing/lib64/python3.11/rpmlint/configdefaults.toml /opt/testing/share/rpmlint/cron-whitelist.toml /opt/testing/share/rpmlint/dbus-services.toml /opt/testing/share/rpmlint/device-files-whitelist.toml /opt/testing/share/rpmlint/licenses.toml /opt/testing/share/rpmlint/opensuse.toml /opt/testing/share/rpmlint/pam-modules.toml /opt/testing/share/rpmlint/permissions-whitelist.toml /opt/testing/share/rpmlint/pie-executables.toml /opt/testing/share/rpmlint/polkit-rules-whitelist.toml /opt/testing/share/rpmlint/scoring.toml /opt/testing/share/rpmlint/security.toml /opt/testing/share/rpmlint/sudoers-whitelist.toml /opt/testing/share/rpmlint/sysctl-whitelist.toml /opt/testing/share/rpmlint/systemd-tmpfiles.toml /opt/testing/share/rpmlint/users-groups.toml /opt/testing/share/rpmlint/world-writable-whitelist.toml /opt/testing/share/rpmlint/zypper-plugins.toml checks: 41, packages: 3 pam.x86_64: W: unstripped-binary-or-object /usr/lib64/libpam.so.0.85.1 pam.x86_64: W: unstripped-binary-or-object /usr/lib64/libpam_misc.so.0.82.1 pam.x86_64: W: unstripped-binary-or-object /usr/lib64/libpamc.so.0.82.1 pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_access.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_canonicalize_user.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_debug.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_deny.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_echo.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_env.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_exec.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_faildelay.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_faillock.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_filter.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_filter/upperLOWER pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_ftp.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_group.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_keyinit.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_limits.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_listfile.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_localuser.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_loginuid.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_mail.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_mkhomedir.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_motd.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_namespace.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_nologin.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_permit.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_pwhistory.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_rhosts.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_rootok.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_securetty.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_selinux.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_sepermit.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_setquota.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_shells.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_stress.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_succeed_if.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_time.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_tty_audit.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_umask.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_unix.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_usertype.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_warn.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_wheel.so pam.x86_64: W: unstripped-binary-or-object /usr/lib64/security/pam_xauth.so pam.x86_64: W: unstripped-binary-or-object /usr/sbin/faillock pam.x86_64: W: unstripped-binary-or-object /usr/sbin/mkhomedir_helper pam.x86_64: W: unstripped-binary-or-object /usr/sbin/pwhistory_helper pam.x86_64: W: unstripped-binary-or-object /usr/sbin/unix2_chkpwd pam.x86_64: W: unstripped-binary-or-object /usr/sbin/unix_chkpwd pam.x86_64: W: unstripped-binary-or-object /usr/sbin/unix_update This executable should be stripped from debugging symbols, in order to take less space and be loaded faster. This is usually done automatically at buildtime by rpm. pam.x86_64: W: tmpfile-not-in-filelist /run/faillock pam.x86_64: W: tmpfile-not-in-filelist /run/motd.d pam.x86_64: W: tmpfile-not-in-filelist /run/pam_timestamp Please add the specified file to your %files section as %ghost so users can easily query who created the file, it gets uninstalled on package removal and finally other rpmlint checks see it. pam.x86_64: E: systemd-service-without-service_del_preun pam_namespace.service The package contains a systemd service but doesn't contain a %preun with a call to service_del_preun. pam.x86_64: E: systemd-service-without-service_del_postun pam_namespace.service The package contains a systemd service but doesn't contain a %postun with a call to service_del_postun. pam.x86_64: E: systemd-service-without-service_add_pre pam_namespace.service The package contains a systemd service but doesn't contain a %pre with a call to service_add_pre. pam.x86_64: E: systemd-service-without-service_add_post pam_namespace.service The package contains a systemd service but doesn't contain a %post with a call to service_add_post. pam.x86_64: W: obsolete-not-provided pam_unix pam.x86_64: W: obsolete-not-provided pam_unix-nis If a package is obsoleted by a compatible replacement, the obsoleted package should also be provided in order to not cause unnecessary dependency breakage. If the obsoleting package is not a compatible replacement for the old one, leave out the Provides. pam.x86_64: W: missing-call-to-setgroups-before-setuid /usr/sbin/unix_chkpwd This executable is calling setuid and setgid without setgroups or initgroups. This means it didn't relinquish all groups, and this would be a potential security issue. Check time report (>1% & >0.1s): Check Duration (in s) Fraction (in %) Checked files BinariesCheck 0.7 64.4 BashismsCheck 0.1 9.9 TOTAL 1.0 100.0 3 packages and 0 specfiles checked; 4 errors, 57 warnings, 149 filtered, 4 badness; has taken 1.0 s