Repocop reports by acl

  packager rpm id test status message
aris bumblebee-3.2.1-alt11.src altlinux-policy-obsolete-buildreq warn Build dependency on rpm-build-ubt is obsolete and should be dropped to get rid of rpm-build-ubt package.
aris bumblebee-3.2.1-alt11.x86_64 init-condrestart fail /etc/rc.d/init.d/bumblebeed: missing condstop target. ERROR: alt-specific script %_sbindir/preun_service (used in your %preun_service macro) depends on condstop. Please, fix.
boyarsh alterator-pkg-2.7.4-alt1.noarch unsafe-tmp-usage-in-scripts fail The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /usr/lib/alterator/backend3/pkg-install: $ grep -A5 -B5 /tmp/ /usr/lib/alterator/backend3/pkg-install ;; write) case "$in__objects" in /) if test_bool "$in_auto"; then make_apt < /dev/null &> /tmp/pkg-install.log else start_pipe &> /tmp/pkg-install.log fi ;; notify) write_pipe "$in_message" ;; Found error in /usr/lib/alterator/backend3/pkg-size: $ grep -A5 -B5 /tmp/ /usr/lib/alterator/backend3/pkg-size echo "pkg-size:start" local tmpfile="$(make_manifest $in_lists)" if [ -s "$tmpfile" ]; then stderr_handler & echo "n"|apt-get --simple-output install --manifest "$tmpfile" 2>> /tmp/install2.log || rc=$? else echo "apt-get:status:disk-size:0k" fi rm -f "$tmpfile" echo "pkg-size:finish:$rc"
boyarsh alterator-postfix-dovecot-0.8.7-alt1.noarch checkbashisms experimental checkbashisms utility found possible bashisms in: /usr/bin/alterator-postfix-dovecot-functions
boyarsh installer-common-stage2-1.10.4-alt2.x86_64 checkbashisms experimental checkbashisms utility found possible bashisms in: /usr/bin/cp-metadata /usr/sbin/postinstall /usr/sbin/xorg_conf_setup
boyarsh installer-common-stage2-1.10.4-alt2.x86_64 rpm-filesystem-conflict-file-file warn File /usr/sbin/postinstall conflicts with the package installworld-0.1-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
boyarsh livecd-save-nfs-0.4.1-alt1.noarch init-condrestart fail /etc/rc.d/init.d/livecd-save-nfs: missing condrestart target. Note: alt-specific script %_sbindir/post_service (used in %post_service macro) depends on condrestart. It is wise to add condrestart anyway./etc/rc.d/init.d/livecd-save-nfs: missing condstop target. ERROR: alt-specific script %_sbindir/preun_service (used in your %preun_service macro) depends on condstop. Please, fix.
boyarsh livecd-save-nfs-0.4.1-alt1.noarch init-lsb warn /etc/rc.d/init.d/livecd-save-nfs: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
boyarsh livecd-save-nfs-0.4.1-alt1.noarch missing-url info Missing Url: in a package.
boyarsh pam_mount-2.16-alt1.3.src beehive-log-unpackaged-files-found-i586 info warning: Installed (but unpackaged) file(s) found:
/usr/include/libcryptmount.h
/usr/lib/libcryptmount.so
/usr/lib/pkgconfig/libcryptmount.pc
boyarsh pam_mount-2.16-alt1.3.src beehive-log-unpackaged-files-found-x86_64 info warning: Installed (but unpackaged) file(s) found:
/usr/include/libcryptmount.h
/usr/lib64/libcryptmount.so
/usr/lib64/pkgconfig/libcryptmount.pc
cas alterator-usersource-functions-0.8.5-alt2.noarch checkbashisms experimental checkbashisms utility found possible bashisms in: /usr/bin/alterator-usersource-functions
glebfm nitrokey-app-0.6.3-alt2.x86_64 freedesktop-desktop info desktop-file-validate utility printed the following message(s): /usr/share/applications/nitrokey-app.desktop: hint: value item "Security" in key "Categories" in group "Desktop Entry" can be extended with another category among the following categories: Settings, or System
ldv bind-9.11.22-alt1.src specfile-useradd-n warn -n in useradd is compat option and can be removed any time. Use -N instead.
ldv bind-9.11.22-alt1.x86_64 init-lsb warn /etc/rc.d/init.d/bind: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
ldv bind-devel-9.11.22-alt1.x86_64 rpm-filesystem-conflict-file-file warn There are file conflicts with the package libisc-export-dhcp-devel-9.11.15-alt1.x86_64, for example, /usr/include/bind9/dns/adb.h (29 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
ldv bootloader-utils-0.5.3-alt1.noarch missing-url info Missing Url: in a package.
ldv ca-certificates-2020.06.29-alt1.noarch missing-url info Missing Url: in a package.
ldv consolehelper-0.3.2-alt1.x86_64 missing-url info Missing Url: in a package.
ldv consolehelper-debuginfo-0.3.2-alt1.x86_64 missing-url info Missing Url: in a package.
ldv lwresd-9.11.22-alt1.x86_64 init-but-no-native-systemd info The package have SysV init script(s) but no native systemd files.
ldv lwresd-9.11.22-alt1.x86_64 init-lsb fail /etc/rc.d/init.d/lwresd: not systemd compatible: lsb init header missing and lwresd.service is not present. See http://www.altlinux.org/Services_Policy for details.
manowar alterator-5.4.1-alt2.x86_64 checkbashisms experimental checkbashisms utility found possible bashisms in: /usr/bin/alterator-systemctl-helper
manowar alterator-5.4.1-alt2.x86_64 init-lsb warn /etc/rc.d/init.d/alteratord: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
manowar alterator-5.4.1-alt2.x86_64 subdir-in-var-run info Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.
mike livecd-install-0.9.15-alt1.noarch freedesktop-categories warn Menu-related Additional Categories (http://standards.freedesktop.org/menu-spec/latest/apa.html) not found in /usr/share/applications/livecd-install.desktop. Please add it or report a bug against this test if you already have registered one (not including menu unrelated ones as Core or Qt).
rider audit-2.8.5-alt5.git.e4021a9.x86_64 init-lsb warn /etc/rc.d/init.d/auditd: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
rider csync2-2.0-alt1.1.src beehive-log-unpackaged-files-found-i586 info warning: Installed (but unpackaged) file(s) found:
/usr/share/doc/csync2/AUTHORS
/usr/share/doc/csync2/ChangeLog
/usr/share/doc/csync2/README
rider csync2-2.0-alt1.1.src beehive-log-unpackaged-files-found-x86_64 info warning: Installed (but unpackaged) file(s) found:
/usr/share/doc/csync2/AUTHORS
/usr/share/doc/csync2/ChangeLog
/usr/share/doc/csync2/README
rider csync2-2.0-alt1.1.x86_64 init-lsb fail /etc/rc.d/init.d/csync2: not systemd compatible: lsb init header missing and csync2.service is not present. See http://www.altlinux.org/Services_Policy for details.
rider csync2-2.0-alt1.1.x86_64 systemd-check-socket-name experimental in csync2-2.0-alt1.1.x86_64: there is a socket csync2.socket but no service csync2.service. Ask ildar@ why it is not right.
sem ModemManager-1.14.6-alt1.x86_64 dbus-xml-not-in-devel info file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Bearer.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Call.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Modem.Firmware.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Modem.Location.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Modem.Messaging.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Modem.Modem3gpp.Ussd.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Modem.Modem3gpp.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Modem.ModemCdma.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Modem.Oma.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Modem.Signal.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Modem.Simple.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Modem.Time.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Modem.Voice.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Modem.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Sim.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.Sms.xml is not used in run time. Move it to the -devel subpackage.
file /usr/share/dbus-1/interfaces/org.freedesktop.ModemManager1.xml is not used in run time. Move it to the -devel subpackage.
sem NetworkManager-applet-gtk-1.19.0-alt1.gab06222e.x86_64 freedesktop-categories warn Menu-related Additional Categories (http://standards.freedesktop.org/menu-spec/latest/apa.html) not found in /usr/share/applications/nm-connection-editor.desktop. Please add it or report a bug against this test if you already have registered one (not including menu unrelated ones as Core or Qt).
sem NetworkManager-daemon-1.26.3-alt2.g2d8c6343e.x86_64 arch-dep-package-has-big-usr-share info The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
sem NetworkManager-daemon-1.26.3-alt2.g2d8c6343e.x86_64 file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since
/usr might be mounted read-only and thus, the local system
administrator would not have a chance to modify this configuration
file.
sem NetworkManager-iodine-1.2.1-alt1.git20180722.x86_64 file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since
/usr might be mounted read-only and thus, the local system
administrator would not have a chance to modify this configuration
file.
sem NetworkManager-l2tp-1.8.2-alt1.x86_64 file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since
/usr might be mounted read-only and thus, the local system
administrator would not have a chance to modify this configuration
file.
sem NetworkManager-openvpn-1.8.12-alt1.x86_64 file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since
/usr might be mounted read-only and thus, the local system
administrator would not have a chance to modify this configuration
file.
sem NetworkManager-pptp-1.2.8-alt2.x86_64 file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since
/usr might be mounted read-only and thus, the local system
administrator would not have a chance to modify this configuration
file.
sem NetworkManager-ssh-1.2.11-alt1.x86_64 file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since
/usr might be mounted read-only and thus, the local system
administrator would not have a chance to modify this configuration
file.
sem NetworkManager-vpnc-1.2.6-alt1.x86_64 file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since
/usr might be mounted read-only and thus, the local system
administrator would not have a chance to modify this configuration
file.
sem PokerTH-data-1.1.2-alt6.noarch iconsdir experimental Please, move pixmaps from /usr/share/pixmaps to %_liconsdir, %_niconsdir, %_miconsdir according to their size. See http://www.altlinux.org/IconPathsPolicy.
sem alterator-backend-x11-1.98.14-alt3.x86_64 checkbashisms experimental checkbashisms utility found possible bashisms in: /usr/bin/video_drv
sem alterator-datetime-4.6.1-alt1.x86_64 checkbashisms experimental checkbashisms utility found possible bashisms in: /usr/bin/alterator-datetime-functions
sem alterator-fbi-5.49.1-alt1.src specfile-useradd-n warn -n in useradd is compat option and can be removed any time. Use -N instead.
sem alterator-fbi-5.49.1-alt1.x86_64 init-lsb warn /etc/rc.d/init.d/ahttpd: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
sem alterator-fbi-5.49.1-alt1.x86_64 subdir-in-var-run info Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.
sem alterator-hw-functions-0.7.7-alt1.noarch checkbashisms experimental checkbashisms utility found possible bashisms in: /usr/bin/alterator-hw-functions
sem alterator-logs-0.9.1-alt1.1.1.src beehive-log-unpackaged-files-found-i586 info warning: Installed (but unpackaged) file(s) found:
/usr/lib/alterator/ui/logs/ajax.go
sem alterator-logs-0.9.1-alt1.1.1.src beehive-log-unpackaged-files-found-x86_64 info warning: Installed (but unpackaged) file(s) found:
/usr/lib/alterator/ui/logs/ajax.go
sem alterator-net-domain-0.7.1-alt1.x86_64 checkbashisms experimental checkbashisms utility found possible bashisms in: /usr/bin/ipa-sh-functions
sem alterator-net-domain-0.7.1-alt1.x86_64 unsafe-tmp-usage-in-scripts fail The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /usr/lib/alterator/backend3/net-domain: $ grep -A5 -B5 /tmp/ /usr/lib/alterator/backend3/net-domain ## https://www.altlinux.org/ActiveDirectory/DC ad_provision_domain() { local domain_name="$1" shift local log="/tmp/samba-dc-provision-$(date +%d.%m.%Y-%H:%M:%S)-$domain_name.log" # Begin log date > "$log" echo "Domain: $domain_name" >> "$log" echo >> "$log" -- if [ "$in_domain_type" = 'ad' ]; then if ipa_install_running; then ipa_install_stop fi env > /tmp/net-domain.txt ad_current_domain="$($samba_tool domain info '127.0.0.1' | sed 's/ *: /:/' | sed -n 's/^Domain://p')" # Check creation of existing domain if [ "$ad_current_domain" != "$in_domain" ]; then write_domain "$in_domain" "1"
sem alterator-net-functions-2.0.3-alt1.noarch checkbashisms experimental checkbashisms utility found possible bashisms in: /usr/bin/alterator-net-functions
sem alterator-net-iptables-4.19.8-alt1.x86_64 checkbashisms experimental checkbashisms utility found possible bashisms in: /usr/bin/iptables_helper
sem alterator-x11-1.98.14-alt3.src beehive-log-unpackaged-files-found-i586 info warning: Installed (but unpackaged) file(s) found:
/usr/lib/alterator/ui/x11/ajax.go
/usr/lib/alterator/ui/x11/c-messages.go
/usr/lib/alterator/ui/x11/driver/ajax.go
/usr/lib/alterator/ui/x11/monitor/ajax.go
sem alterator-x11-1.98.14-alt3.src beehive-log-unpackaged-files-found-x86_64 info warning: Installed (but unpackaged) file(s) found:
/usr/lib/alterator/ui/x11/ajax.go
/usr/lib/alterator/ui/x11/c-messages.go
/usr/lib/alterator/ui/x11/driver/ajax.go
/usr/lib/alterator/ui/x11/monitor/ajax.go
sem alterator-x11-1.98.14-alt3.x86_64 checkbashisms experimental checkbashisms utility found possible bashisms in: /usr/bin/config-x11
sem atril-gtk-1.24.0-alt1.x86_64 arch-dep-package-has-big-usr-share info The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
sem atril-gtk-dvi-1.24.0-alt1.x86_64 rpm-filesystem-conflict-file-file warn File /usr/lib64/atril/3/backends/libdvidocument.so conflicts with the package mate-document-viewer-dvi-1.24.0-alt1.x86_64. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem autogen-5.18.12-alt2.x86_64 uncompressed-manpages info Package contains uncompressed manual pages.
sem branding-alt-workstation-9.1-alt1.src requires-ImageMagick info Dependency on ImageMagick (compat package) found. It probably should be replaced with more specific dependency like /usr/bin/convert or ImageMagick-tools, or it can be already autodetected by findreq-shell.
sem branding-alt-workstation-alterator-9.1-alt1.noarch rpm-filesystem-conflict-file-file warn There are file conflicts with the package branding-alt-sisyphus-alterator-20191026-alt1.noarch, for example, /usr/share/alterator/design/images/attention.gif (16 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem branding-alt-workstation-alterator-9.1-alt1.noarch rpm-filesystem-conflict-symlink-file warn symlink /usr/share/alterator/design/images/steps/datetime.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/finish.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/greeting.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/install.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/install2-basesystem.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/install2-preinstall.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/lilo.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/net-eth.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/notes-license.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/notes-release-notes.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/pkg-groups.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/preinstall.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/root.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/sysconfig-base.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/sysconfig-kbd.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/sysconfig-language.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/timezone.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/user.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/users.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/vm.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
symlink /usr/share/alterator/design/images/steps/x11.png is a file in the package branding-alt-sisyphus-alterator-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem branding-alt-workstation-bootloader-9.1-alt1.x86_64 rpm-obsolete-self warn The package obsoletes itself. Must be an error in spec file. Please provide Obsoletes: with the valid value.
sem branding-alt-workstation-bootloader-9.1-alt1.x86_64 sisyphus_check fail sisyphus_check failed: /ALT/Sisyphus/files/x86_64/RPMS/branding-alt-workstation-bootloader-9.1-alt1.x86_64.rpm: the package obsoletes itself sisyphus_check: check-deps ERROR: package dependencies violation
sem branding-alt-workstation-graphics-9.1-alt1.noarch rpm-obsolete-self warn The package obsoletes itself. Must be an error in spec file. Please provide Obsoletes: with the valid value.
sem branding-alt-workstation-graphics-9.1-alt1.noarch sisyphus_check fail sisyphus_check failed: /ALT/Sisyphus/files/noarch/RPMS/branding-alt-workstation-graphics-9.1-alt1.noarch.rpm: the package obsoletes itself sisyphus_check: check-deps ERROR: package dependencies violation /ALT/Sisyphus/files/noarch/RPMS/branding-alt-workstation-graphics-9.1-alt1.noarch.rpm: license not found in '/usr/share/license' directory: Different /ALT/Sisyphus/files/noarch/RPMS/branding-alt-workstation-graphics-9.1-alt1.noarch.rpm: license not found in '/usr/share/license' directory: licenses
sem branding-alt-workstation-indexhtml-9.1-alt1.noarch rpm-filesystem-conflict-file-file warn There are file conflicts with the package branding-alt-sisyphus-indexhtml-20191026-alt1.noarch, for example, /usr/share/applications/indexhtml.desktop (4 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem branding-alt-workstation-mate-settings-9.1-alt1.noarch rpm-filesystem-conflict-file-file warn File /usr/share/install3/lightdm-gtk-greeter.conf conflicts with the package branding-simply-linux-system-settings-9.0-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
File /etc/skel/.gtkrc-2.0 conflicts with the package branding-simply-linux-xfce-settings-9.0-alt1.x86_64. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem branding-alt-workstation-notes-9.1-alt1.noarch file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since
/usr might be mounted read-only and thus, the local system
administrator would not have a chance to modify this configuration
file.
sem branding-alt-workstation-notes-9.1-alt1.noarch rpm-filesystem-conflict-file-file warn Files /usr/share/alt-notes/release-notes.all.html /usr/share/alt-notes/release-notes.ru.html conflict with the package alt-notes-school-server-4.1-alt3.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
Files /usr/share/alt-notes/release-notes.all.html /usr/share/alt-notes/release-notes.ru.html conflict with the package branding-alt-sisyphus-notes-20191026-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem branding-alt-workstation-release-9.1-alt1.noarch rpm-obsolete-self warn The package obsoletes itself. Must be an error in spec file. Please provide Obsoletes: with the valid value.
sem branding-alt-workstation-release-9.1-alt1.noarch sisyphus_check fail sisyphus_check failed: /ALT/Sisyphus/files/noarch/RPMS/branding-alt-workstation-release-9.1-alt1.noarch.rpm: the package obsoletes itself sisyphus_check: check-deps ERROR: package dependencies violation /ALT/Sisyphus/files/noarch/RPMS/branding-alt-workstation-release-9.1-alt1.noarch.rpm: The use of such a license name is ambiguous: GPL
sem branding-simply-linux-9.0-alt1.src requires-ImageMagick info Dependency on ImageMagick (compat package) found. It probably should be replaced with more specific dependency like /usr/bin/convert or ImageMagick-tools, or it can be already autodetected by findreq-shell.
sem branding-simply-linux-indexhtml-9.0-alt1.noarch rpm-filesystem-conflict-file-file warn There are file conflicts with the package branding-xalt-kworkstation-indexhtml-9.1.1-alt1.x86_64, for example, /usr/share/applications/indexhtml.desktop (13 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem branding-simply-linux-notes-9.0-alt1.noarch file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since
/usr might be mounted read-only and thus, the local system
administrator would not have a chance to modify this configuration
file.
sem branding-simply-linux-system-settings-9.0-alt1.noarch rpm-filesystem-conflict-file-file warn File /usr/share/install3/lightdm-gtk-greeter.conf conflicts with the package branding-alt-workstation-mate-settings-9.1-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem branding-simply-linux-xfce-settings-9.0-alt1.x86_64 rpm-filesystem-conflict-file-file warn File /etc/skel/.gtkrc-2.0 conflicts with the package branding-alt-workstation-mate-settings-9.1-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
File /etc/skel/.gtkrc-2.0 conflicts with the package branding-xalt-kworkstation-graphics-9.1.1-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem ca-trust-0.1.2-alt1.noarch missing-url info Missing Url: in a package.
sem ca-trust-java-0.1.2-alt1.noarch missing-url info Missing Url: in a package.
sem cgreen-1.0-alt2.x86_64 altlinux-policy-shared-lib-contains-devel-so info SharedLibs Policy Draft violation: Shared Lib package should not contain symlink /usr/lib64/libcgreen.so but just /usr/lib64/libcgreen.so.0.1. According to SharedLibs Policy Draft, symlink /usr/lib64/libcgreen.so should be placed in a special subpackage named lib-devel. If you have already packaged this symlink in lib-devel, just append \%exclude /usr/lib64/libcgreen.so to \%files of cgreen-1.0-alt2.x86_64. Otherwise, move the symlink into the subpackage lib-devel. There is a known exception for case the .so file is not a shared lib but a plugin that is never directly linked with. Please report such a case to repocop test.
sem claws-mail-3.17.8-alt1.x86_64 arch-dep-package-has-big-usr-share info The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
sem clawsker-1.3.1-alt1.noarch freedesktop-categories warn Menu-related Additional Categories (http://standards.freedesktop.org/menu-spec/latest/apa.html) not found in /usr/share/applications/clawsker.desktop. Please add it or report a bug against this test if you already have registered one (not including menu unrelated ones as Core or Qt).
sem cpufreq-simple-0.4.1-alt1.noarch init-lsb warn /etc/rc.d/init.d/cpufreq-simple: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
sem cpufreq-simple-0.4.1-alt1.noarch missing-url info Missing Url: in a package.
sem dhcp-4.4.2-alt1.src specfile-useradd-n warn -n in useradd is compat option and can be removed any time. Use -N instead.
sem dhcp-omshell-4.4.2-alt1.x86_64 bin-permissions info not executable file /usr/bin/omshell
sem dhcp-relay-4.4.2-alt1.x86_64 init-lsb warn /etc/rc.d/init.d/dhcrelay: lsb init header missing. /etc/rc.d/init.d/dhcrelay6: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
sem dhcp-server-4.4.2-alt1.x86_64 init-lsb warn /etc/rc.d/init.d/dhcpd: lsb init header missing. /etc/rc.d/init.d/dhcpd6: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
sem dnsmasq-2.82-alt1.src specfile-useradd-n warn -n in useradd is compat option and can be removed any time. Use -N instead.
sem dnsmasq-2.82-alt1.x86_64 checkbashisms experimental checkbashisms utility found possible bashisms in: /etc/rc.d/init.d/dnsmasq
sem dnsmasq-2.82-alt1.x86_64 file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since
/usr might be mounted read-only and thus, the local system
administrator would not have a chance to modify this configuration
file.
sem dnsmasq-2.82-alt1.x86_64 init-lsb warn /etc/rc.d/init.d/dnsmasq: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
sem etcnet-0.9.19-alt1.noarch init-condrestart warn /etc/rc.d/init.d/network: missing condrestart target. Note: alt-specific script %_sbindir/post_service (used in %post_service macro) depends on condrestart. It is wise to add condrestart anyway./etc/rc.d/init.d/network: missing condstop target. Note: alt-specific script %_sbindir/preun_service (used in %preun_service macro) depends on condstop. It is wise to add condstop anyway.
sem etcnet-0.9.19-alt1.src beehive-log-non-strict-dependency-i586 info etcnet: non-strict dependency on etcnet-defaults-desktop
etcnet: non-strict dependency on etcnet-defaults-server
sem etcnet-0.9.19-alt1.src beehive-log-non-strict-dependency-x86_64 info etcnet: non-strict dependency on etcnet-defaults-desktop
etcnet: non-strict dependency on etcnet-defaults-server
sem etcnethook-services-restart-0.0.1-alt1.noarch missing-url info Missing Url: in a package.
sem firewall-config-0.9.1-alt1.noarch freedesktop-desktop info desktop-file-validate utility printed the following message(s): /usr/share/applications/firewall-config.desktop: hint: value "System;Settings;Security;" for key "Categories" in group "Desktop Entry" contains more than one main category; application might appear more than once in the application menu
sem firewalld-0.9.1-alt1.noarch file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since
/usr might be mounted read-only and thus, the local system
administrator would not have a chance to modify this configuration
file.
sem flare-engine-1.11-alt1.x86_64 arch-dep-package-has-big-usr-share info The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
sem gnutls-utils-3.6.15-alt1.x86_64 uncompressed-manpages info Package contains uncompressed manual pages.
sem hostname-hook-hosts-5.1.7-alt1.noarch missing-url info Missing Url: in a package.
sem installer-distro-alt-workstation-stage2-9.0.0-alt1.noarch rpm-filesystem-conflict-file-file warn There are file conflicts with the package installer-distro-alt-server-v-stage2-9.0.1-alt1.noarch, for example, /usr/share/install2/alterator-menu/module-expert-list (4 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
File /usr/share/install2/installer-steps conflicts with the package installer-distro-altlinux-generic-stage2-7.0.3-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
There are file conflicts with the package installer-distro-centaurus-stage2-9.0-alt1.x86_64, for example, /usr/share/install2/alterator-menu/module-expert-list (4 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
There are file conflicts with the package installer-distro-cliff-stage2-8.2-alt1.x86_64, for example, /usr/share/install2/alterator-menu/module-expert-list (4 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
There are file conflicts with the package installer-distro-education-stage2-9.1-alt3.x86_64, for example, /usr/share/install2/alterator-menu/module-expert-list (5 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
File /usr/share/install2/installer-steps conflicts with the package installer-distro-server-light-stage2-8.0-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
There are file conflicts with the package installer-distro-simply-linux-stage2-9.2.1-alt1.noarch, for example, /usr/share/install2/alterator-menu/module-expert-list (4 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
File /usr/share/install2/installer-steps conflicts with the package installer-distro-token-desktop-stage2-0.1.1-alt5.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem installer-distro-simply-linux-stage2-9.2.1-alt1.noarch rpm-filesystem-conflict-file-file warn Files /usr/share/install2/alterator-menu/module-expert-list /usr/share/install2/installer-steps /usr/share/install2/preinstall.d/80-setup-user-groups conflict with the package installer-distro-alt-server-v-stage2-9.0.1-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
There are file conflicts with the package installer-distro-alt-workstation-stage2-9.0.0-alt1.noarch, for example, /usr/share/install2/alterator-menu/module-expert-list (4 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
Files /usr/share/install2/alterator-menu/module-expert-list /usr/share/install2/installer-steps /usr/share/install2/preinstall.d/80-setup-user-groups conflict with the package installer-distro-altlinux-desktop-stage2-8.1.0-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
Files /usr/share/install2/alterator-menu/module-expert-list /usr/share/install2/installer-steps conflict with the package installer-distro-altlinux-generic-stage2-7.0.3-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
Files /usr/share/install2/alterator-menu/module-expert-list /usr/share/install2/installer-steps conflict with the package installer-distro-altlinux-server-stage2-7.0.2-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
There are file conflicts with the package installer-distro-centaurus-stage2-9.0-alt1.x86_64, for example, /usr/share/install2/alterator-menu/module-expert-list (4 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
There are file conflicts with the package installer-distro-cliff-stage2-8.2-alt1.x86_64, for example, /usr/share/install2/alterator-menu/module-expert-list (4 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
There are file conflicts with the package installer-distro-education-stage2-9.1-alt3.x86_64, for example, /usr/share/install2/alterator-menu/module-expert-list (10 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
Files /usr/share/install2/alterator-menu/module-expert-list /usr/share/install2/installer-steps conflict with the package installer-distro-server-light-stage2-8.0-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
Files /usr/share/install2/alterator-menu/module-expert-list /usr/share/install2/installer-steps /usr/share/install2/preinstall.d/80-setup-user-groups conflict with the package installer-distro-token-desktop-stage2-0.1.1-alt5.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem installer-feature-simply-livecd-9.0.0-alt1.noarch rpm-filesystem-conflict-file-file warn File /usr/share/livecd-install/alterator-menu/module-expert-list conflicts with the package installer-distro-token-desktop-live-0.1.1-alt5.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem installer-feature-spt-profiles-0.6-alt1.noarch rpm-filesystem-conflict-file-file warn File /usr/share/install2/prepkg.d/50-groups.sh conflicts with the package installer-feature-alphabet-profiles-1.0-alt2.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
File /usr/share/install2/prepkg.d/50-groups.sh conflicts with the package installer-feature-centaurus-profiles-2.0-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem iputils-20200821-alt2.src specfile-useradd-n warn -n in useradd is compat option and can be removed any time. Use -N instead.
sem libguile-vhttpd-0.7.10-alt1.x86_64 missing-url info Missing Url: in a package.
sem libguile-vhttpd-debuginfo-0.7.10-alt1.x86_64 missing-url info Missing Url: in a package.
sem libisc-export-dhcp-devel-9.11.15-alt1.x86_64 rpm-filesystem-conflict-file-file warn There are file conflicts with the package bind-devel-9.11.22-alt1.x86_64, for example, /usr/include/bind9/dns/adb.h (29 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
sem libvhttpd-0.7.10-alt1.x86_64 missing-url info Missing Url: in a package.
sem libvhttpd-debuginfo-0.7.10-alt1.x86_64 missing-url info Missing Url: in a package.
sem libvhttpd-devel-0.7.10-alt1.x86_64 missing-url info Missing Url: in a package.
sem livecd-timezone-0.1.0-alt1.noarch init-lsb warn /etc/rc.d/init.d/livecd-timezone: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
sem livecd-timezone-0.1.0-alt1.noarch missing-url info Missing Url: in a package.
sem menulibre-2.2.1-alt2.noarch freedesktop-desktop warn desktop-file-validate utility exited abnormally with the following message(s): /usr/share/applications/menulibre.desktop: error: value "Budgie;Cinnamon;GNOME;KDE;LXDE;LXQt;MATE;Pantheon;Unity;XFCE;" for key "OnlyShowIn" in group "Desktop Entry" contains an unregistered value "Budgie"; values extending the format should start with "X-"
/usr/share/applications/menulibre.desktop: hint: value "GNOME;GTK;Settings;DesktopSettings;Utility;" for key "Categories" in group "Desktop Entry" contains more than one main category; application might appear more than once in the application menu
sem nginx-webapps-0.2.0-alt1.noarch missing-url info Missing Url: in a package.
sem nginx-webapps-ssl-0.2.0-alt1.noarch missing-url info Missing Url: in a package.
sem ninfod-20200821-alt2.x86_64 init-lsb warn /etc/rc.d/init.d/ninfod: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
sem openresolv-3.10.0-alt1.noarch checkbashisms experimental checkbashisms utility found possible bashisms in: /sbin/resolvconf
sem openvpn-gostcrypto-2.4.7-alt3.x86_64 checkbashisms experimental checkbashisms utility found possible bashisms in: /etc/rc.d/init.d/openvpn
sem parole-1.0.5-alt1.x86_64 freedesktop-desktop info desktop-file-validate utility printed the following message(s): /usr/share/applications/org.xfce.Parole.desktop: warning: key "OnlyShowIn" in group "Desktop Action Play" is deprecated
/usr/share/applications/org.xfce.Parole.desktop: warning: key "OnlyShowIn" in group "Desktop Action Previous" is deprecated
/usr/share/applications/org.xfce.Parole.desktop: warning: key "OnlyShowIn" in group "Desktop Action Next" is deprecated
sem python-module-pytest_sourceorder-0.5.1-alt1.src altlinux-python-python2-in-spec warn spec file explicitly calls /usr/bin/python. It is deprecated binary. Use /usr/bin/python2.
sem python-module-pytest_sourceorder-0.5.1-alt1.src specfile-python2-in-spec warn spec file explicitly calls /usr/bin/python. It is deprecated binary. Use /usr/bin/python2.
sem radvd-2.19-alt1.x86_64 init-lsb warn /etc/rc.d/init.d/radvd: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
sem rdnssd-1.0.4-alt2.x86_64 subdir-in-var-run info Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.
sem rp-pppoe-client-3.14-alt1.noarch checkbashisms experimental checkbashisms utility found possible bashisms in: /usr/sbin/pppoe-connect
sem rp-pppoe-client-3.14-alt1.noarch init-but-no-native-systemd info The package have SysV init script(s) but no native systemd files.
sem rp-pppoe-client-3.14-alt1.noarch init-condrestart warn /etc/rc.d/init.d/pppoe: missing condrestart target. Note: alt-specific script %_sbindir/post_service (used in %post_service macro) depends on condrestart. It is wise to add condrestart anyway./etc/rc.d/init.d/pppoe: missing condstop target. Note: alt-specific script %_sbindir/preun_service (used in %preun_service macro) depends on condstop. It is wise to add condstop anyway.
sem rp-pppoe-client-3.14-alt1.noarch init-lsb fail /etc/rc.d/init.d/pppoe: not systemd compatible: lsb init header missing and pppoe.service is not present. See http://www.altlinux.org/Services_Policy for details.
sem snort-2.9.7.0-alt3.x86_64 alt-alternatives-vs-ghost info Since alternatives 0.4 the practice to own alternative symlinks as ghost files is deprecated. the ghost file /usr/sbin/snort is an alternative in package snort-2.9.7.0-alt3.x86_64. Consider removing the ghost file /usr/sbin/snort.
Since alternatives 0.4 the practice to own alternative symlinks as ghost files is deprecated. the ghost file /usr/sbin/snort is an alternative in package snort-plain+flexresp-2.9.7.0-alt3.x86_64. Consider removing the ghost file /usr/sbin/snort.
sem snort-2.9.7.0-alt3.x86_64 checkbashisms experimental checkbashisms utility found possible bashisms in: /etc/rc.d/init.d/snortd
sem snort-2.9.7.0-alt3.x86_64 init-but-no-native-systemd info The package have SysV init script(s) but no native systemd files.
sem snort-2.9.7.0-alt3.x86_64 init-lsb fail /etc/rc.d/init.d/snortd: not systemd compatible: lsb init header missing and snortd.service is not present. See http://www.altlinux.org/Services_Policy for details.
sem system-config-audit-0.4.21-alt1.x86_64 freedesktop-desktop info desktop-file-validate utility printed the following message(s): /usr/share/applications/system-config-audit.desktop: hint: value "Settings;System;Security;" for key "Categories" in group "Desktop Entry" contains more than one main category; application might appear more than once in the application menu
sem system-config-audit-0.4.21-alt1.x86_64 sisyphus_check fail sisyphus_check failed: /ALT/Sisyphus/files/x86_64/RPMS/system-config-audit-0.4.21-alt1.x86_64.rpm: forbidden requires: /usr/bin/python sisyphus_check: check-deps ERROR: package dependencies violation
sem thunar-4.15.2-alt1.x86_64 arch-dep-package-has-big-usr-share info The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
sem thunar-4.15.2-alt1.x86_64 freedesktop-desktop info desktop-file-validate utility printed the following message(s): /usr/share/applications/thunar-bulk-rename.desktop: warning: value "Hromadn? premenovanie" for key "Comment[sk]" in group "Desktop Entry" looks redundant with value "Hromadn? premenovanie" of key "Name[sk]"
/usr/share/applications/thunar-bulk-rename.desktop: hint: value "System;Utility;Core;GTK;FileTools;" for key "Categories" in group "Desktop Entry" contains more than one main category; application might appear more than once in the application menu
desktop-file-validate utility printed the following message(s): /usr/share/applications/thunar.desktop: hint: value "System;Utility;Core;GTK;FileTools;FileManager;" for key "Categories" in group "Desktop Entry" contains more than one main category; application might appear more than once in the application menu
sem ulogd-2.0.7-alt1.src specfile-useradd-n warn -n in useradd is compat option and can be removed any time. Use -N instead.
sem ulogd-2.0.7-alt1.x86_64 init-lsb warn /etc/rc.d/init.d/ulogd: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
sem vconsole-setup-kludge-0.1-alt1.noarch missing-url info Missing Url: in a package.
sem vhttpd-utils-0.7.10-alt1.x86_64 missing-url info Missing Url: in a package.
sem vhttpd-utils-debuginfo-0.7.10-alt1.x86_64 missing-url info Missing Url: in a package.
sem xfce4-screensaver-0.1.10-alt1.x86_64 freedesktop-desktop info desktop-file-validate utility printed the following message(s): /usr/share/applications/screensavers/xfce-personal-slideshow.desktop: hint: value "Screensaver;" for key "Categories" in group "Desktop Entry" does not contain a registered main category; application might only show up in a "catch-all" section of the application menu
desktop-file-validate utility printed the following message(s): /usr/share/applications/screensavers/xfce-popsquares.desktop: hint: value "Screensaver;" for key "Categories" in group "Desktop Entry" does not contain a registered main category; application might only show up in a "catch-all" section of the application menu
desktop-file-validate utility printed the following message(s): /usr/share/applications/screensavers/xfce-floaters.desktop: hint: value "Screensaver;" for key "Categories" in group "Desktop Entry" does not contain a registered main category; application might only show up in a "catch-all" section of the application menu
sem xfce4-screensaver-0.1.10-alt1.x86_64 iconsdir experimental Please, move pixmaps from /usr/share/pixmaps to %_liconsdir, %_niconsdir, %_miconsdir according to their size. See http://www.altlinux.org/IconPathsPolicy.
sem xfce4-sensors-plugin-1.3.92-alt2.g2aff2bd.x86_64 freedesktop-desktop info desktop-file-validate utility printed the following message(s): /usr/share/applications/xfce4-sensors.desktop: hint: value "X-XFCE;Utility;System;Monitor;" for key "Categories" in group "Desktop Entry" contains more than one main category; application might appear more than once in the application menu
sem xfce4-settings-4.15.2-alt1.x86_64 freedesktop-desktop info desktop-file-validate utility printed the following message(s): /usr/share/applications/xfce4-web-browser.desktop: warning: value "????" for key "Comment[zh_HK]" in group "Desktop Entry" looks redundant with value "????" of key "Name[zh_HK]"
sem xfce4-taskmanager-1.2.3-alt1.x86_64 freedesktop-categories warn Menu-related Additional Categories (http://standards.freedesktop.org/menu-spec/latest/apa.html) not found in /usr/share/applications/xfce4-taskmanager.desktop. Please add it or report a bug against this test if you already have registered one (not including menu unrelated ones as Core or Qt).
sem xfce4-taskmanager-1.2.3-alt1.x86_64 freedesktop-desktop info desktop-file-validate utility printed the following message(s): /usr/share/applications/xfce4-taskmanager.desktop: hint: value "System;Utility;" for key "Categories" in group "Desktop Entry" contains more than one main category; application might appear more than once in the application menu
sem xfce4-terminal-0.8.9.2-alt1.x86_64 freedesktop-desktop info desktop-file-validate utility printed the following message(s): /usr/share/applications/xfce4-terminal.desktop: warning: value "Terminal Emulator" for key "Comment" in group "Desktop Entry" looks redundant with value "Terminal Emulator" of key "GenericName"
/usr/share/applications/xfce4-terminal.desktop: warning: value "????? ?????" for key "Comment[ar]" in group "Desktop Entry" looks redundant with value "????? ?????" of key "GenericName[ar]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulador de terminal" for key "Comment[ast]" in group "Desktop Entry" looks redundant with value "Emulador de terminal" of key "GenericName[ast]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "???????? ?????????" for key "Comment[be]" in group "Desktop Entry" looks redundant with value "???????? ?????????" of key "GenericName[be]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "?????????? ????????" for key "Comment[bg]" in group "Desktop Entry" looks redundant with value "?????????? ????????" of key "GenericName[bg]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulador de terminal" for key "Comment[ca]" in group "Desktop Entry" looks redundant with value "Emulador de terminal" of key "GenericName[ca]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emul?tor termin?lu" for key "Comment[cs]" in group "Desktop Entry" looks redundant with value "Emul?tor termin?lu" of key "GenericName[cs]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Terminalemulator" for key "Comment[da]" in group "Desktop Entry" looks redundant with value "Terminalemulator" of key "GenericName[da]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Terminal-Programm" for key "Comment[de]" in group "Desktop Entry" looks redundant with value "Terminal-Programm" of key "GenericName[de]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "????????? ?????????? XFCE" for key "Comment[el]" in group "Desktop Entry" looks redundant with value "????????? ?????????? XFCE" of key "GenericName[el]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Terminal Emulator" for key "Comment[en_AU]" in group "Desktop Entry" looks redundant with value "Terminal Emulator" of key "GenericName[en_AU]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Terminal Emulator" for key "Comment[en_GB]" in group "Desktop Entry" looks redundant with value "Terminal Emulator" of key "GenericName[en_GB]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Terminala Simulilo" for key "Comment[eo]" in group "Desktop Entry" looks redundant with value "Terminala Simulilo" of key "GenericName[eo]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulador de terminal" for key "Comment[es]" in group "Desktop Entry" looks redundant with value "Emulador de terminal" of key "GenericName[es]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Terminaliemulaator" for key "Comment[et]" in group "Desktop Entry" looks redundant with value "Terminaliemulaator" of key "GenericName[et]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Terminal emuladorea" for key "Comment[eu]" in group "Desktop Entry" looks redundant with value "Terminal emuladorea" of key "GenericName[eu]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "P??te-emulaattori" for key "Comment[fi]" in group "Desktop Entry" looks redundant with value "P??te-emulaattori" of key "GenericName[fi]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "?mulateur de terminal" for key "Comment[fr]" in group "Desktop Entry" looks redundant with value "?mulateur de terminal" of key "GenericName[fr]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulador de terminal" for key "Comment[gl]" in group "Desktop Entry" looks redundant with value "Emulador de terminal" of key "GenericName[gl]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "???? ????" for key "Comment[he]" in group "Desktop Entry" looks redundant with value "???? ????" of key "GenericName[he]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulator terminala" for key "Comment[hr]" in group "Desktop Entry" looks redundant with value "Emulator terminala" of key "GenericName[hr]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Termin?lemul?tor" for key "Comment[hu]" in group "Desktop Entry" looks redundant with value "Termin?lemul?tor" of key "GenericName[hu]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "????????? ???????" for key "Comment[hy_AM]" in group "Desktop Entry" looks redundant with value "????????? ???????" of key "GenericName[hy_AM]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulator Terminal" for key "Comment[id]" in group "Desktop Entry" looks redundant with value "Emulator Terminal" of key "GenericName[id]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulator de Terminal" for key "Comment[ie]" in group "Desktop Entry" looks redundant with value "Emulator de Terminal" of key "GenericName[ie]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Skj?hermir" for key "Comment[is]" in group "Desktop Entry" looks redundant with value "Skj?hermir" of key "GenericName[is]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulatore di Terminale" for key "Comment[it]" in group "Desktop Entry" looks redundant with value "Emulatore di Terminale" of key "GenericName[it]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "????????????" for key "Comment[ja]" in group "Desktop Entry" looks redundant with value "????????????" of key "GenericName[ja]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "???????? ?????????" for key "Comment[kk]" in group "Desktop Entry" looks redundant with value "???????? ?????????" of key "GenericName[kk]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "??? ?????" for key "Comment[ko]" in group "Desktop Entry" looks redundant with value "??? ?????" of key "GenericName[ko]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Terminalo emuliatorius" for key "Comment[lt]" in group "Desktop Entry" looks redundant with value "Terminalo emuliatorius" of key "GenericName[lt]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Termin??a emulators" for key "Comment[lv]" in group "Desktop Entry" looks redundant with value "Termin??a emulators" of key "GenericName[lv]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulator Terminal" for key "Comment[ms]" in group "Desktop Entry" looks redundant with value "Emulator Terminal" of key "GenericName[ms]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Teminalemulator" for key "Comment[nb]" in group "Desktop Entry" looks redundant with value "Teminalemulator" of key "GenericName[nb]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Terminalvenster" for key "Comment[nl]" in group "Desktop Entry" looks redundant with value "Terminalvenster" of key "GenericName[nl]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulator de terminal" for key "Comment[oc]" in group "Desktop Entry" looks redundant with value "Emulator de terminal" of key "GenericName[oc]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "?????? ???????" for key "Comment[pa]" in group "Desktop Entry" looks redundant with value "?????? ???????" of key "GenericName[pa]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emuluje dzia?anie terminala X" for key "Comment[pl]" in group "Desktop Entry" looks redundant with value "Emuluje dzia?anie terminala X" of key "GenericName[pl]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulador de terminal" for key "Comment[pt]" in group "Desktop Entry" looks redundant with value "Emulador de terminal" of key "GenericName[pt]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulador de terminal" for key "Comment[pt_BR]" in group "Desktop Entry" looks redundant with value "Emulador de terminal" of key "GenericName[pt_BR]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulator de terminal" for key "Comment[ro]" in group "Desktop Entry" looks redundant with value "Emulator de terminal" of key "GenericName[ro]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "???????? ?????????" for key "Comment[ru]" in group "Desktop Entry" looks redundant with value "???????? ?????????" of key "GenericName[ru]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "????? ???????" for key "Comment[si]" in group "Desktop Entry" looks redundant with value "????? ???????" of key "GenericName[si]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Termin?l Emul?tor" for key "Comment[sk]" in group "Desktop Entry" looks redundant with value "Termin?l Emul?tor" of key "GenericName[sk]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Posnemovalnik terminala" for key "Comment[sl]" in group "Desktop Entry" looks redundant with value "Posnemovalnik terminala" of key "GenericName[sl]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Emulues Terminali" for key "Comment[sq]" in group "Desktop Entry" looks redundant with value "Emulues Terminali" of key "GenericName[sq]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "???????? ?????????" for key "Comment[sr]" in group "Desktop Entry" looks redundant with value "???????? ?????????" of key "GenericName[sr]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Terminalemulator" for key "Comment[sv]" in group "Desktop Entry" looks redundant with value "Terminalemulator" of key "GenericName[sv]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "????????? ??????????" for key "Comment[te]" in group "Desktop Entry" looks redundant with value "????????? ??????????" of key "GenericName[te]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "??????????????????????" for key "Comment[th]" in group "Desktop Entry" looks redundant with value "??????????????????????" of key "GenericName[th]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "U?birim ?yk?n?c?s?" for key "Comment[tr]" in group "Desktop Entry" looks redundant with value "U?birim ?yk?n?c?s?" of key "GenericName[tr]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "???????? Emulator" for key "Comment[ug]" in group "Desktop Entry" looks redundant with value "???????? Emulator" of key "GenericName[ug]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "???????? ?????????" for key "Comment[uk]" in group "Desktop Entry" looks redundant with value "???????? ?????????" of key "GenericName[uk]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "????? ????????" for key "Comment[ur]" in group "Desktop Entry" looks redundant with value "????? ????????" of key "GenericName[ur]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "????? ????????" for key "Comment[ur_PK]" in group "Desktop Entry" looks redundant with value "????? ????????" of key "GenericName[ur_PK]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "Tr?nh gi? l?p Terminal" for key "Comment[vi]" in group "Desktop Entry" looks redundant with value "Tr?nh gi? l?p Terminal" of key "GenericName[vi]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "?????" for key "Comment[zh_CN]" in group "Desktop Entry" looks redundant with value "?????" of key "GenericName[zh_CN]"
/usr/share/applications/xfce4-terminal.desktop: warning: value "?????" for key "Comment[zh_TW]" in group "Desktop Entry" looks redundant with value "?????" of key "GenericName[zh_TW]"
sem xfce4-weather-plugin-0.10.0-alt4.g1510e45.x86_64 arch-dep-package-has-big-usr-share info The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
sem xfdashboard-0.7.8-alt1.x86_64 freedesktop-categories warn Menu-related Additional Categories (http://standards.freedesktop.org/menu-spec/latest/apa.html) not found in /usr/share/applications/xfdashboard.desktop. Please add it or report a bug against this test if you already have registered one (not including menu unrelated ones as Core or Qt).
sem xorg-apps-7.8-alt9.x86_64 missing-url info Missing Url: in a package.
sem xorg-conf-libinput-touchpad-0.1-alt1.noarch missing-url info Missing Url: in a package.
sem xorg-conf-synaptics-1.0-alt1.noarch missing-url info Missing Url: in a package.
sem xorg-drv-input-7.8-alt9.x86_64 missing-url info Missing Url: in a package.
sem xorg-drv-video-7.8-alt9.x86_64 missing-url info Missing Url: in a package.
sem xorg-utils-7.8-alt9.x86_64 missing-url info Missing Url: in a package.
sem zathura-0.4.7-alt1.x86_64 dbus-xml-not-in-devel info file /usr/share/dbus-1/interfaces/org.pwmt.zathura.xml is not used in run time. Move it to the -devel subpackage.
slev custodia-0.6.0-alt6.noarch subdir-in-var-run info Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.
slev dogtag-pki-server-theme-10.9.4-alt1.x86_64 arch-dep-package-consists-of-usr-share info The package consists of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
slev freeipa-common-4.8.9-alt1.x86_64 arch-dep-package-consists-of-usr-share info The package consists of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
slev freeipa-server-4.8.9-alt1.x86_64 systemd-check-socket-name experimental in freeipa-server-4.8.9-alt1.x86_64: there is a socket ipa-otpd.socket but no service ipa-otpd.service. Ask ildar@ why it is not right.
slev freeipa-server-common-4.8.9-alt1.x86_64 file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since
/usr might be mounted read-only and thus, the local system
administrator would not have a chance to modify this configuration
file.
slev gssproxy-0.8.3-alt1.x86_64 subdir-in-var-run info Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.
slev pki-base-java-10.9.4-alt1.x86_64 altlinux-java-forbidden-requires fail The package has JVM-specific Requires: java-1.8.0-openjdk-headless. Those requires are often due to packaging errors and also specifically forbidden by Java Packageing Policy. If you really really need it, write it in more indirect way.
slev pki-base-java-10.9.4-alt1.x86_64 arch-dep-package-consists-of-usr-share info The package consists of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
slev pki-ca-10.9.4-alt1.x86_64 arch-dep-package-consists-of-usr-share info The package consists of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
slev pki-javadoc-10.9.4-alt1.x86_64 arch-dep-package-consists-of-usr-share info The package consists of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
slev pki-kra-10.9.4-alt1.x86_64 arch-dep-package-consists-of-usr-share info The package consists of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
slev pki-server-10.9.4-alt1.x86_64 unsafe-tmp-usage-in-scripts fail The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /usr/share/pki/acme/sbin/pki-acme-run: $ grep -A5 -B5 /tmp/ /usr/share/pki/acme/sbin/pki-acme-run [ -f /var/lib/tomcats/pki/conf/certs/ca_signing.key ] then echo "INFO: Importing CA Signing Certificate and Key" # generate random password openssl rand -hex 8 > /tmp/password # import PEM cert and key into PKCS #12 file openssl pkcs12 -export \ -in /var/lib/tomcats/pki/conf/certs/ca_signing.crt \ -inkey /var/lib/tomcats/pki/conf/certs/ca_signing.key \ -out /tmp/certs.p12 \ -name ca_signing \ -passout file:/tmp/password # import PKCS #12 file into NSS database pki -d /var/lib/tomcats/pki/conf/alias pkcs12-import \ --pkcs12 /tmp/certs.p12 \ --password-file /tmp/password # trust imported CA signing cert certutil -M -d /var/lib/tomcats/pki/conf/alias -n ca_signing -t CT,C,C rm /tmp/certs.p12 rm /tmp/password fi # import certs.p12 if available if [ -f /var/lib/tomcats/pki/conf/certs/certs.p12 ] then -- echo "INFO: Issuing Self-signed CA Signing Certificate" # generate CA signing CSR pki -d /var/lib/tomcats/pki/conf/alias nss-cert-request \ --subject "CN=CA Signing Certificate" \ --csr /tmp/ca_signing.csr # issue self-signed CA signing cert pki -d /var/lib/tomcats/pki/conf/alias nss-cert-issue \ --csr /tmp/ca_signing.csr \ --ext /usr/share/pki/acme/issuer/nss/ca_signing.conf \ --months-valid 12 \ --cert /tmp/ca_signing.crt # import and trust CA signing cert into NSS database pki -d /var/lib/tomcats/pki/conf/alias nss-cert-import \ --cert /tmp/ca_signing.crt \ --trust CT,C,C \ ca_signing rm /tmp/ca_signing.crt rm /tmp/ca_signing.csr fi echo "INFO: CA Signing Certificate:" certutil -L -d /var/lib/tomcats/pki/conf/alias -n ca_signing -- echo "INFO: Issuing SSL Server Certificate" # generate SSL server CSR pki -d /var/lib/tomcats/pki/conf/alias nss-cert-request \ --subject "CN=$HOSTNAME" \ --csr /tmp/sslserver.csr # issue SSL server cert pki -d /var/lib/tomcats/pki/conf/alias nss-cert-issue \ --issuer ca_signing \ --csr /tmp/sslserver.csr \ --ext /usr/share/pki/acme/issuer/nss/sslserver.conf \ --cert /tmp/sslserver.crt # import SSL server cert into NSS database pki -d /var/lib/tomcats/pki/conf/alias nss-cert-import \ --cert /tmp/sslserver.crt \ sslserver rm /tmp/sslserver.crt rm /tmp/sslserver.csr fi echo "INFO: SSL Server Certificate:" certutil -L -d /var/lib/tomcats/pki/conf/alias -n sslserver

generated by repocop at Wed Oct 21 04:31:06 2020