asterisk-base-0.58-alt1.noarch file-in-usr-marked-as-private info Files below /usr/share not readable by others look like configuration files. They should be labelled as %config and placed in /etc because; /usr/ might be mounted read-only and thus, the local system; administrator would not have a chance to modify this file.; ; asterisk-base-0.58-alt1.noarch subdir-in-var-run info Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.; asterisk-core-sounds-en-alaw-1.4.22-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-en-alaw-1.4.15-alt3.noarch, but the package asterisk-sounds-en-alaw-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-en-g722-1.4.22-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-en-g722-1.4.15-alt3.noarch, but the package asterisk-sounds-en-g722-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-en-g729-1.4.22-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-en-g729-1.4.15-alt3.noarch, but the package asterisk-sounds-en-g729-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-en-gsm-1.4.22-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-en-gsm-1.4.15-alt3.noarch, but the package asterisk-sounds-en-gsm-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-en-siren14-1.4.22-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-en-siren14-1.4.15-alt3.noarch, but the package asterisk-sounds-en-siren14-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-en-siren7-1.4.22-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-en-siren7-1.4.15-alt3.noarch, but the package asterisk-sounds-en-siren7-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-en-ulaw-1.4.22-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-en-ulaw-1.4.15-alt3.noarch, but the package asterisk-sounds-en-ulaw-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-en-wav-1.4.22-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-en-wav-1.4.15-alt3.noarch, but the package asterisk-sounds-en-wav-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-es-alaw-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-es-alaw-1.4.15-alt3.noarch, but the package asterisk-sounds-es-alaw-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-es-g722-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-es-g722-1.4.15-alt3.noarch, but the package asterisk-sounds-es-g722-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-es-g729-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-es-g729-1.4.15-alt3.noarch, but the package asterisk-sounds-es-g729-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-es-gsm-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-es-gsm-1.4.15-alt3.noarch, but the package asterisk-sounds-es-gsm-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-es-siren14-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-es-siren14-1.4.15-alt3.noarch, but the package asterisk-sounds-es-siren14-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-es-siren7-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-es-siren7-1.4.15-alt3.noarch, but the package asterisk-sounds-es-siren7-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-es-ulaw-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-es-ulaw-1.4.15-alt3.noarch, but the package asterisk-sounds-es-ulaw-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-es-wav-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-es-wav-1.4.15-alt3.noarch, but the package asterisk-sounds-es-wav-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-fr-alaw-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-fr-alaw-1.4.15-alt3.noarch, but the package asterisk-sounds-fr-alaw-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-fr-g722-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-fr-g722-1.4.15-alt3.noarch, but the package asterisk-sounds-fr-g722-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-fr-g729-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-fr-g729-1.4.15-alt3.noarch, but the package asterisk-sounds-fr-g729-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-fr-gsm-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-fr-gsm-1.4.15-alt3.noarch, but the package asterisk-sounds-fr-gsm-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-fr-siren14-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-fr-siren14-1.4.15-alt3.noarch, but the package asterisk-sounds-fr-siren14-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-fr-siren7-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-fr-siren7-1.4.15-alt3.noarch, but the package asterisk-sounds-fr-siren7-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-fr-ulaw-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-fr-ulaw-1.4.15-alt3.noarch, but the package asterisk-sounds-fr-ulaw-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-core-sounds-fr-wav-1.4.21-alt3.noarch rpm-obsolete-live-package info The package obsoletes the package asterisk-sounds-fr-wav-1.4.15-alt3.noarch, but the package asterisk-sounds-fr-wav-1.4.15-alt3.noarch is still alive and in the repository. Ask its maintainer to remove it, or, if it should not be removed, remove the Obsoletes: tag. Do not forget to add explicit conflicts with the other package if nessessary.; asterisk-op_panel-0.30-alt5.1.noarch init-lsb warn /etc/rc.d/init.d//op_panel: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.; asterisk-op_panel-0.30-alt5.1.noarch subdir-in-var-run info Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.; asterisk-sounds-base-0.1-alt1.noarch missing-url info Missing Url: in a package.; asterisk-sounds-en-alaw-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-en-alaw-1.4.22-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-en-alaw-1.4.22-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-en-base-0.1-alt1.noarch missing-url info Missing Url: in a package.; asterisk-sounds-en-g722-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-en-g722-1.4.22-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-en-g722-1.4.22-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-en-g729-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-en-g729-1.4.22-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-en-g729-1.4.22-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-en-gsm-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-en-gsm-1.4.22-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-en-gsm-1.4.22-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-en-siren14-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-en-siren14-1.4.22-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-en-siren14-1.4.22-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-en-siren7-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-en-siren7-1.4.22-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-en-siren7-1.4.22-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-en-ulaw-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-en-ulaw-1.4.22-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-en-ulaw-1.4.22-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-en-wav-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-en-wav-1.4.22-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-en-wav-1.4.22-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-en_AU-base-0.1-alt1.noarch missing-url info Missing Url: in a package.; asterisk-sounds-es-alaw-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-es-alaw-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-es-alaw-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-es-base-0.1-alt1.noarch missing-url info Missing Url: in a package.; asterisk-sounds-es-g722-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-es-g722-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-es-g722-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-es-g729-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-es-g729-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-es-g729-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-es-gsm-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-es-gsm-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-es-gsm-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-es-siren14-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-es-siren14-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-es-siren14-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-es-siren7-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-es-siren7-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-es-siren7-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-es-ulaw-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-es-ulaw-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-es-ulaw-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-es-wav-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-es-wav-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-es-wav-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-fr-alaw-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-fr-alaw-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-fr-alaw-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-fr-base-0.1-alt1.noarch missing-url info Missing Url: in a package.; asterisk-sounds-fr-g722-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-fr-g722-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-fr-g722-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-fr-g729-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-fr-g729-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-fr-g729-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-fr-gsm-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-fr-gsm-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-fr-gsm-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-fr-siren14-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-fr-siren14-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-fr-siren14-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-fr-siren7-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-fr-siren7-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-fr-siren7-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-fr-ulaw-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-fr-ulaw-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-fr-ulaw-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-fr-wav-1.4.15-alt3.noarch rpm-package-is-obsoleted warn The package is obsoleted by the package asterisk-core-sounds-fr-wav-1.4.21-alt3.noarch, but is still alive and in the repository. Consider removing the package, or, if you want the package to be alive, ask the maintainer of asterisk-core-sounds-fr-wav-1.4.21-alt3.noarch to remove Obsoletes: tag.; asterisk-sounds-ru-base-0.1-alt1.noarch missing-url info Missing Url: in a package.; asterisk1.6.2-app_konference-1.5-alt8.x86_64 unsafe-tmp-usage-in-scripts fail The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /usr/share/doc/asterisk1.6.2-app_konference-1.5/asterikast/munin/conferences: $ grep -A5 -B5 /tmp/ /usr/share/doc/asterisk1.6.2-app_konference-1.5/asterikast/munin/conferences EOM exit 0;; esac echo -n "conferences.value " asterisk -rx "konference list" | tee /tmp/konferences | sed 1d | wc -l; asterisk1.6.2-chan_datacard-0.53-alt21.x86_64 missing-url info Missing Url: in a package.; asterisk1.6.2-chan_datacard-debuginfo-0.53-alt21.x86_64 missing-url info Missing Url: in a package.; asterisk1.6.2-chan_dongle-1.1-alt1.r2.x86_64 missing-url info Missing Url: in a package.; asterisk1.6.2-chan_dongle-debuginfo-1.1-alt1.r2.x86_64 missing-url info Missing Url: in a package.; asterisk1.8-app_konference-1.5-alt9.x86_64 unsafe-tmp-usage-in-scripts fail The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /usr/share/doc/asterisk1.8-app_konference-1.5/asterikast/munin/conferences: $ grep -A5 -B5 /tmp/ /usr/share/doc/asterisk1.8-app_konference-1.5/asterikast/munin/conferences EOM exit 0;; esac echo -n "conferences.value " asterisk -rx "konference list" | tee /tmp/konferences | sed 1d | wc -l; astmanproxy-1.22-alt5.pre.20061015.1.x86_64 init-lsb warn /etc/rc.d/init.d//astmanproxy: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.; astmanproxy-1.22-alt5.pre.20061015.1.x86_64 subdir-in-var-run info Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.; backup-manager-0.7.9-alt2.1.noarch altlinux-find-lang-mo warn Language specific files in /usr/share/locale should be marked, for example, using %find_lang. See http://www.altlinux.org/FindLangPolicy for details.; bontmia-0.14-alt3.1.noarch unsafe-tmp-usage-in-scripts fail The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /usr/sbin/bontmia: $ grep -A5 -B5 /tmp/ /usr/sbin/bontmia lock_destination() { # Ensure that there is no other bontmia running against the same destination touch /tmp/bontmia_lock_file.$$ echo "no" | mv -i /tmp/bontmia_lock_file.$$ "${tmpdir}"/is_running.lock 2>&1 | \ grep "overwrite" >/dev/null 2>&1 && { echo "Bontmia is already doing a backup on this tmpdir:" echo " ${tmpdir}" echo echo " If you are sure this is false you can manually remove the lockfile:" -- fi if test "x$dryrun" == "xno"; then mkdir -p "$tmpdir/unfinished_backup/$this_backup/$hostname" rsync ${rsync_options} -e "ssh -p $port" "${dir}" "${tmpdir}/unfinished_backup/$this_backup/${hostname}" 2>&1 >/tmp/bontmia_rsync_output.$$ || { echo echo " Caught an error doing rsync (return code $?)" echo " The last 10 lines of output from rsync:" tail -10 /tmp/bontmia_rsync_output.$$ echo echo " Retrying rsync..." rsync ${rsync_options} -e "ssh -p $port" "${dir}" "${tmpdir}/unfinished_backup/$this_backup/${hostname}" 2>&1 >/tmp/bontmia_rsync_output.$$ || { echo echo " Still no luck. Rsync failed with returncode $?" echo " $dir" echo " Please check that there is room for all the data" echo " The last 10 lines of output from rsync:" tail -10 /tmp/bontmia_rsync_output.$$.2 echo echo echo " Continuing with the next backup source" echo exit_status="1" -- echo "Aborting" unlock_destination exit 1 } check_program cp touch /tmp/bontmia_test_cp_file.$$ || { echo "Could not create a temporary file on /tmp" echo "Please make sure that /tmp is writable" echo "Aborting" unlock_destination exit 1 } cp -l /tmp/bontmia_test_cp_file.$$ /tmp/bontmia_test_cp_file.$$.2 >/dev/null 2>&1 || { echo "cp on your system does not support the -l option" echo "You might not have the GNU version of 'cp'" echo "Aborting" unlock_destination exit 1 } rm -f /tmp/bontmia_test_cp_file.$$ /tmp/bontmia_test_cp_file.$$.2 } #################################################################; cairo-compmgr-0.3.0-alt2.qa1.x86_64 freedesktop-categories fail Main Categories consist of those categories that every conforming desktop environment MUST support.(http://standards.freedesktop.org/menu-spec/latest/apa.html). None found in /usr/share/applications/cairo-compmgr.desktop. please, fix.; cairo-compmgr-0.3.0-alt2.qa1.x86_64 freedesktop-desktop warn desktop-file-validate utility exited abnormally with the following message(s): /usr/share/applications/cairo-compmgr.desktop: warning: value "Cairo Composite Manager" for key "Comment" in group "Desktop Entry" looks redundant with value "Cairo Composite Manager" of key "Name"; /usr/share/applications/cairo-compmgr.desktop: error: (will be fatal in the future): value "GNOME;GTK;X-Desktop;" for key "Categories" in group "Desktop Entry" does not contain a registered main category; cairo-compmgr-0.3.0-alt2.qa1.x86_64 iconsdir experimental Please, move pixmaps from /usr/share/pixmaps to %_liconsdir, %_niconsdir, %_miconsdir according to their size. See http://www.altlinux.org/IconPathsPolicy.; cairo-compmgr-0.3.0-alt2.qa1.x86_64 missing-url info Missing Url: in a package.; cairo-compmgr-debuginfo-0.3.0-alt2.qa1.x86_64 missing-url info Missing Url: in a package.; dahdi-2.3.0-alt5.x86_64 init-condrestart fail /etc/rc.d/init.d/dahdi: missing condrestart target. ERROR: alt-specific script %_sbindir/post_service (used in your %post_service macro) depends on condrestart. Please, fix./etc/rc.d/init.d/dahdi: missing condstop target. ERROR: alt-specific script %_sbindir/preun_service (used in your %preun_service macro) depends on condstop. Please, fix.; dahdi-tools-2.3.0-alt5.x86_64 init-condrestart warn /etc/rc.d/init.d/modprobe.d: missing condrestart target. Note: alt-specific script %_sbindir/post_service (used in %post_service macro) depends on condrestart. It is wise to add condrestart anyway./etc/rc.d/init.d/modprobe.d: missing condstop target. Note: alt-specific script %_sbindir/preun_service (used in %preun_service macro) depends on condstop. It is wise to add condstop anyway.; dropbear-scp-0.50-alt4.x86_64 rpm-filesystem-conflict-file-file warn There are file conflicts with the package openssh-common-5.9p1-alt1.x86_64. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; ghc-alsa-mixer-0.1.2-alt1.1.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; ghc-alsa-mixer-debuginfo-0.1.2-alt1.1.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; ghc-deepseq-1.1.0.2-alt1.1.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; ghc-deepseq-debuginfo-1.1.0.2-alt1.1.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; ghc-digest-0.0.0.9-alt1.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; ghc-feed-0.3.8-alt2.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; ghc-ghc-events-0.2.0.1-alt6.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; ghc-gtk-0.12.0-alt1.x86_64 arch-dep-package-has-big-usr-share info The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.; ghc-hostname-1.0-alt1.1.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; ghc-mtl-2.0.1.0-alt2.1.x86_64 missing-url info Missing Url: in a package.; ghc-mtl-debuginfo-2.0.1.0-alt2.1.x86_64 missing-url info Missing Url: in a package.; ghc-sha-1.4.1.1-alt7.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; ghc-threadscope-0.1.2-alt8.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; ghc-transformers-0.2.2.0-alt2.1.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; ghc-transformers-debuginfo-0.2.2.0-alt2.1.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; ghc-xhtml-3000.2.0.1-alt6.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; haskell-filetrigger-0.0.2-alt1.noarch missing-url info Missing Url: in a package.; iaxmodem-1.1.1-alt3.x86_64 subdir-in-var-run info Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.; kakasi-2.3.4-alt2.qa1.1.x86_64 altlinux-policy-shared-lib-contains-devel-so info SharedLibs Policy Draft violation: Shared Lib package should not contain symlink /usr/lib64/libkakasi.so but just /usr/lib64/libkakasi.so.2.1.0. According to SharedLibs Policy Draft, symlink /usr/lib64/libkakasi.so should be placed in a special subpackage named lib-devel. If you have already packaged this symlink in lib-devel, just append \%exclude /usr/lib64/libkakasi.so to \%files of kakasi-2.3.4-alt2.qa1.1.x86_64. Otherwise, move the symlink into the subpackage lib-devel. There is a known exception for case the .so file is not a shared lib but a plugin that is never directly linked with. Please report such a case to repocop test.; kakasi-2.3.4-alt2.qa1.1.x86_64 library-pkgnames info package contains public library which is used in external packages: name should be lib* according to http://altlinux.org/Drafts/SharedLibs; kernel-source-mISDN-0.1-alt5.20070317.x86_64 missing-url info Missing Url: in a package.; libcairo-compmgr-devel-0.3.0-alt2.qa1.x86_64 missing-url info Missing Url: in a package.; libiksemel-1.3-alt7.x86_64 missing-url info Missing Url: in a package.; libiksemel-debuginfo-1.3-alt7.x86_64 missing-url info Missing Url: in a package.; libiksemel-devel-1.3-alt7.x86_64 missing-url info Missing Url: in a package.; libiksemel-devel-debuginfo-1.3-alt7.x86_64 missing-url info Missing Url: in a package.; liblksctp-1.0.11-alt1.x86_64 missing-url info Missing Url: in a package.; liblksctp-debuginfo-1.0.11-alt1.x86_64 missing-url info Missing Url: in a package.; liblksctp-devel-1.0.11-alt1.x86_64 missing-url info Missing Url: in a package.; liblksctp-devel-static-1.0.11-alt1.x86_64 missing-url info Missing Url: in a package.; libmISDN-0.1-alt5.20070317.x86_64 missing-url info Missing Url: in a package.; libmISDN-debuginfo-0.1-alt5.20070317.x86_64 missing-url info Missing Url: in a package.; libmISDN-devel-0.1-alt5.20070317.x86_64 missing-url info Missing Url: in a package.; libmISDN-devel-static-0.1-alt5.20070317.x86_64 missing-url info Missing Url: in a package.; libopenh323_1.19-1.19.0.1-alt8.x86_64 altlinux-policy-shared-lib-contains-devel-so info SharedLibs Policy Draft violation: Shared Lib package should not contain symlink /usr/lib64/libh323_linux_x86_64_r.so but just /usr/lib64/libh323_linux_x86_64_r.so.1.19.0. According to SharedLibs Policy Draft, symlink /usr/lib64/libh323_linux_x86_64_r.so should be placed in a special subpackage named lib-devel. If you have already packaged this symlink in lib-devel, just append \%exclude /usr/lib64/libh323_linux_x86_64_r.so to \%files of libopenh323_1.19-1.19.0.1-alt8.x86_64. Otherwise, move the symlink into the subpackage lib-devel. There is a known exception for case the .so file is not a shared lib but a plugin that is never directly linked with. Please report such a case to repocop test.; libopenr2-1.3.1-alt1.x86_64 rpm-filesystem-conflict-symlink-symlink warn value of symlink /usr/lib64/libopenr2.so.3 is different from the same symlink in the package libopenr2.3-1.3.0-alt1.x86_64. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; libpw1.11-debuginfo-1.11.2-alt0.9cvs20061011.1.x86_64 rpm-filesystem-conflict-symlink-symlink warn value of symlink /usr/lib/debug/usr/lib64/libpt.so.debug is different from the same symlink in the package libpt-debuginfo-2.8.4-alt1.x86_64. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; lksctp-tools-1.0.11-alt1.x86_64 missing-url info Missing Url: in a package.; lksctp-tools-debuginfo-1.0.11-alt1.x86_64 missing-url info Missing Url: in a package.; mISDN-0.1-alt5.20070317.x86_64 missing-url info Missing Url: in a package.; mISDN-debuginfo-0.1-alt5.20070317.x86_64 missing-url info Missing Url: in a package.; mathopd-1.5p6-alt1.x86_64 init-lsb warn /etc/rc.d/init.d//mathopd: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.; mbuni-1.4.0-alt7.x86_64 altlinux-policy-shared-lib-contains-devel-so info SharedLibs Policy Draft violation: Shared Lib package should not contain symlink /usr/lib64/libmms_pgsql_queue.so but just /usr/lib64/libmms_pgsql_queue.so.0.0.0. According to SharedLibs Policy Draft, symlink /usr/lib64/libmms_pgsql_queue.so should be placed in a special subpackage named lib-devel. If you have already packaged this symlink in lib-devel, just append \%exclude /usr/lib64/libmms_pgsql_queue.so to \%files of mbuni-1.4.0-alt7.x86_64. Otherwise, move the symlink into the subpackage lib-devel. There is a known exception for case the .so file is not a shared lib but a plugin that is never directly linked with. Please report such a case to repocop test.; mbuni-1.4.0-alt7.x86_64 library-pkgnames-static warn package contains static library which has the same name as a shared library in the repository, but neither package name ends with -devel-static according to http://altlinux.org/Drafts/SharedLibs nor the package explicitly conflicts with the package with .so library; mbuni-1.4.0-alt7.x86_64 subdir-in-var-run info Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.; mithraen-build-utils-0.1.8-alt1.noarch rpm-filesystem-conflict-file-file warn There are file conflicts with the package openfoam-1.7.1-alt0.4.x86_64. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; mithraen-scanutils-0.4-alt3.noarch freedesktop-desktop warn desktop-file-validate utility exited abnormally with the following message(s): /usr/share/applications/mithraen-scanutils.desktop: error: (will be fatal in the future): value "RasterGraphics" in key "Categories" in group "Desktop Entry" requires another category to be present among the following categories: Graphics;2DGraphics; nginx-1.1.3-alt1.x86_64 init-lsb warn /etc/rc.d/init.d//nginx: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.; nginx-1.1.3-alt1.x86_64 subdir-in-var-run info Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.; ossp-1.3.2-alt5.x86_64 init-lsb warn /etc/rc.d/init.d//osspd: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.; pam0_encfs-0.1.4.4-alt1.x86_64 missing-url info Missing Url: in a package.; perl-CGI-Session-4.42-alt1.1.noarch missing-url info Missing Url: in a package.; perl-CGI-Session-SQLite-1.0-alt3.1.noarch missing-url info Missing Url: in a package.; perl-Text-Template-1.45-alt1.1.noarch missing-url info Missing Url: in a package.; ppp-2.4.5-alt8.x86_64 subdir-in-var-run info Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.; priconfig-0.1-alt2.noarch missing-url info Missing Url: in a package.; proguard-4.4-alt1.noarch missing-url info Missing Url: in a package.; quasar-2.0.2-alt2.x86_64 missing-url info Missing Url: in a package.; trayer-1.0.5-alt2.x86_64 missing-url info Missing Url: in a package.; vzautolimit-0.01-alt3.noarch missing-url info Missing Url: in a package.; wanpipe-3.5.20-alt1.x86_64 init-condrestart fail /etc/rc.d/init.d/wanrouter: missing condrestart target. ERROR: alt-specific script %_sbindir/post_service (used in your %post_service macro) depends on condrestart. Please, fix./etc/rc.d/init.d/wanrouter: missing condstop target. ERROR: alt-specific script %_sbindir/preun_service (used in your %preun_service macro) depends on condstop. Please, fix.; wanpipe-3.5.20-alt1.x86_64 init-lsb warn /etc/rc.d/init.d//wanrouter: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.; ztail-1.0.1-alt1.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.;