alsaplayer-0.99.80-alt11.3.src requires-ImageMagick info Dependency on ImageMagick (compat package) found. It probably should be replaced with more specific dependency like /usr/bin/convert or ImageMagick-tools, or it can be already autodetected by findreq-shell.; alt-domain-server-0.5.3-alt1.noarch missing-url info Missing Url: in a package.; altsp-test-scripts-1.1-alt6.x86_64 missing-url info Missing Url: in a package.; altsp-test-scripts-debuginfo-1.1-alt6.x86_64 missing-url info Missing Url: in a package.; branding-alt-spserver-10.2-alt2.src requires-ImageMagick info Dependency on ImageMagick (compat package) found. It probably should be replaced with more specific dependency like /usr/bin/convert or ImageMagick-tools, or it can be already autodetected by findreq-shell.; branding-alt-spserver-notes-10.2-alt2.noarch file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since; /usr might be mounted read-only and thus, the local system; administrator would not have a chance to modify this configuration; file.; ; branding-alt-spworkstation-10.2-alt2.src requires-ImageMagick info Dependency on ImageMagick (compat package) found. It probably should be replaced with more specific dependency like /usr/bin/convert or ImageMagick-tools, or it can be already autodetected by findreq-shell.; branding-alt-spworkstation-mate-settings-10.2-alt2.noarch rpm-filesystem-conflict-file-file warn File /usr/share/install3/lightdm-gtk-greeter.conf conflicts with the package branding-simply-linux-system-settings-10.2-alt1.2.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; branding-alt-spworkstation-notes-10.2-alt2.noarch file-in-usr-marked-as-conffile warn Files below /usr may not be marked as conffiles, since; /usr might be mounted read-only and thus, the local system; administrator would not have a chance to modify this configuration; file.; ; cap-audit-write-filetrigger-0.1-alt1.noarch missing-url info Missing Url: in a package.; csync-0.50.6-alt1.2.x86_64 missing-url info Missing Url: in a package.; csync-debuginfo-0.50.6-alt1.2.x86_64 missing-url info Missing Url: in a package.; cups-filter-sl-watermark-0.4-alt1.noarch missing-url info Missing Url: in a package.; cups-pdf-3.0.1-alt2.x86_64 systemd-but-no-native-init experimental The package have native systemd file(s) but no SysV init scripts. dconf-defaults-tablet-0.1-alt2.noarch missing-url info Missing Url: in a package.; dconf-defaults-tablet-caribou-fullscale-0.1-alt2.noarch missing-url info Missing Url: in a package.; dconf-defaults-tablet-disable-lightbox-0.1-alt2.noarch missing-url info Missing Url: in a package.; host2cat-1.01-alt7.x86_64 altlinux-policy-obsolete-httpd2-reload info This package contains httpd2 restart/reload calls in its post/un scripts. But those calls are deprecated by httpd2.filetrigger that activates by files in /etc/httpd2/ or %_libdir/apache2/modules/. It should be safe to remove those calls and rely on the filetrigger instead.; host2cat-1.01-alt7.x86_64 init-lsb warn /etc/rc.d/init.d/host2cat: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.; host2cat-1.01-alt7.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; host2cat-debuginfo-1.01-alt7.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; hugin-2023.0.0-alt1.x86_64 arch-dep-package-has-big-usr-share info The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.; ibus-1.5.29-alt1.x86_64 freedesktop-categories warn Menu-related Additional Categories (http://standards.freedesktop.org/menu-spec/latest/apa.html) not found in /usr/share/applications/org.freedesktop.IBus.Setup.desktop. Please add it or report a bug against this test if you already have registered one (not including menu unrelated ones as Core or Qt).; ima-evm-integrity-check-0.6.2-alt1.noarch bin-permissions info not executable file /usr/sbin/bootloader-utils.bash; ima-evm-integrity-check-0.6.2-alt1.noarch missing-url info Missing Url: in a package.; ima-evm-integrity-check-0.6.2-alt1.noarch systemd-but-no-native-init experimental The package have native systemd file(s) but no SysV init scripts. installer-common-stage2-1.15.4-alt1.x86_64 rpm-filesystem-conflict-file-file warn File /usr/sbin/postinstall conflicts with the package installworld-0.1-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; installer-distro-centaurus-stage2-10.2-alt3.x86_64 rpm-filesystem-conflict-file-file warn There are file conflicts with the package installer-distro-token-desktop-stage2-0.1.1-alt5.noarch, for example, /usr/share/install2/alterator-menu/module-expert-list (4 file conflicts in total). Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; dable, consider using alternatives.; s.; ; ing alternatives.; installer-distro-centaurus-stage2-10.2-alt3.x86_64 unsafe-tmp-usage-in-scripts fail The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /usr/share/install2/preinstall.d/35-enable-systemd-networkd.sh: $ grep /tmp/ /usr/share/install2/preinstall.d/35-enable-systemd-networkd.sh shell_config_set $i/options NM_CONTROLLED no shell_config_set $i/options SYSTEMD_CONTROLLED yes shell_config_set $i/options DISABLED yes done } >> /tmp/install2.log 2>&1 : Found error in /usr/share/install2/postinstall.d/66-setup-net-services.sh: $ grep /tmp/ /usr/share/install2/postinstall.d/66-setup-net-services.sh [ "$NM_CONTROLLED" ] && chroot $destdir systemctl disable NetworkManager.service [ "$SYSTEMD_CONTROLLED" ] && chroot $destdir systemctl disable systemd-networkd.service } >> /tmp/install2.log 2>&1 :; installer-distro-cliff-common-10.2-alt1.x86_64 rpm-filesystem-conflict-file-file warn File /usr/share/install2/preinstall.d/80-setup-user-groups conflicts with the package installer-distro-token-desktop-stage2-0.1.1-alt5.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; onflicts are avoidable, consider using alternatives.; .; installer-distro-cliff-stage2-10.2-alt1.x86_64 rpm-filesystem-conflict-file-file warn Files /usr/share/install2/alterator-menu/module-expert-list /usr/share/install2/alterator-menu/module-order-list /usr/share/install2/installer-steps conflict with the package installer-distro-token-desktop-stage2-0.1.1-alt5.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; .; ; installer-feature-alphabet-profiles-1.0-alt2.noarch rpm-filesystem-conflict-file-file warn File /usr/share/install2/prepkg.d/50-groups.sh conflicts with the package installer-feature-centaurus-profiles-2.0-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; installer-feature-centaurus-profiles-2.0-alt1.noarch rpm-filesystem-conflict-file-file warn File /usr/share/install2/prepkg.d/50-groups.sh conflicts with the package installer-feature-alphabet-profiles-1.0-alt2.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; installer-feature-vm-ofs-stage2-0.3-alt1.noarch rpm-filesystem-conflict-file-file warn File /usr/share/install2/initinstall.d/05-vm-profile-ofs conflicts with the package installer-feature-vm-fs-stage2-0.3-alt2.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; installer-feature-vm-ofs-stage3-0.3-alt1.noarch rpm-filesystem-conflict-file-file warn File /usr/share/install2/preinstall.d/01-move-fs-ofs conflicts with the package installer-feature-vm-fs-stage3-0.3-alt2.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; kernel-source-LiME-1.9.1-alt2.noarch missing-url info Missing Url: in a package.; kernel-source-asix-4.20.0-alt1.noarch missing-url info Missing Url: in a package.; kernel-source-ch34x-20180821-alt1.noarch missing-url info Missing Url: in a package.; kernel-source-trsec-1.0-alt2.noarch missing-url info Missing Url: in a package.; kmod-sign-4.18-alt2.x86_64 missing-url info Missing Url: in a package.; kmod-sign-debuginfo-4.18-alt2.x86_64 missing-url info Missing Url: in a package.; lastlog-notification-0.3-alt1.noarch missing-url info Missing Url: in a package.; ldap-user-tools-0.9.5-alt1.noarch missing-url info Missing Url: in a package.; libcsync-0.50.6-alt1.2.x86_64 missing-url info Missing Url: in a package.; libcsync-debuginfo-0.50.6-alt1.2.x86_64 missing-url info Missing Url: in a package.; libcsync-devel-0.50.6-alt1.2.x86_64 missing-url info Missing Url: in a package.; libtclap-doc-1.2.5-alt1.x86_64 arch-dep-package-consists-of-usr-share info The package consists of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.; livecd-gnome-nowarn-space-0.3-alt1.noarch missing-url info Missing Url: in a package.; livecd-gnome-nowarn-space-0.3-alt1.noarch rpm-filesystem-conflict-file-file warn File /etc/skel/.gconf/apps/%gconf.xml conflicts with the package branding-uzguard-workstation-xfce-settings-1.0-alt0.2.x86_64. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; livecd-save-nfs-0.4.2-alt1.noarch init-condrestart fail /etc/rc.d/init.d/livecd-save-nfs: missing condrestart target. Note: alt-specific script %_sbindir/post_service (used in %post_service macro) depends on condrestart. It is wise to add condrestart anyway./etc/rc.d/init.d/livecd-save-nfs: missing condstop target. ERROR: alt-specific script %_sbindir/preun_service (used in your %preun_service macro) depends on condstop. Please, fix.; livecd-save-nfs-0.4.2-alt1.noarch init-lsb warn /etc/rc.d/init.d/livecd-save-nfs: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.; livecd-save-nfs-0.4.2-alt1.noarch missing-url info Missing Url: in a package.; livecd-setauth-0.8-alt1.noarch init-condrestart fail /etc/rc.d/init.d/livecd-setauth: missing condrestart target. ERROR: alt-specific script %_sbindir/post_service (used in your %post_service macro) depends on condrestart. Please, fix./etc/rc.d/init.d/livecd-setauth: missing condstop target. ERROR: alt-specific script %_sbindir/preun_service (used in your %preun_service macro) depends on condstop. Please, fix.; livecd-setauth-0.8-alt1.noarch init-lsb warn /etc/rc.d/init.d/livecd-setauth: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.; livecd-setauth-0.8-alt1.noarch missing-url info Missing Url: in a package.; livecd-setlocale-0.3.13-alt1.noarch init-lsb warn /etc/rc.d/init.d/livecd-setlocale: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.; livecd-setlocale-0.3.13-alt1.noarch missing-url info Missing Url: in a package.; make-initrd-integrity-0.6.2-alt1.noarch missing-url info Missing Url: in a package.; mar-20070301-alt2.x86_64 missing-url info Missing Url: in a package.; mar-debuginfo-20070301-alt2.x86_64 missing-url info Missing Url: in a package.; mkfakepkg-0.1-alt1.noarch missing-url info Missing Url: in a package.; mkimage-profiles-office-server-5.0.0-alt2.noarch missing-url info Missing Url: in a package.; nagwad-service-0.10.5-alt1.noarch systemd-but-no-native-init experimental The package have native systemd file(s) but no SysV init scripts. opendbx-1.4.3-alt3.x86_64 library-pkgnames info package contains public library which is used in external packages: name should be lib* according to http://altlinux.org/Drafts/SharedLibs; openresolv-host2cat-1.01-alt7.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; paxctl-0.9-alt1.x86_64 missing-url info Missing Url: in a package.; paxctl-debuginfo-0.9-alt1.x86_64 missing-url info Missing Url: in a package.; rpmrebuild-kmodsign-0.2-alt2.noarch missing-url info Missing Url: in a package.; settime-rfc867-0.4-alt4.noarch init-lsb warn /etc/rc.d/init.d/settime-rfc867: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.; settime-rfc867-0.4-alt4.noarch missing-url info Missing Url: in a package.; squid-conf-host2cat-1.01-alt7.x86_64 invalid-url warn Package has invalid Url:. It looks like a protocol part (http:,ftp:,etc.) is missing.; startup-rescue-0.49.1-alt1.x86_64 init-but-no-native-systemd info The package have SysV init script(s) but no native systemd files.; startup-rescue-0.49.1-alt1.x86_64 init-condrestart fail /etc/rc.d/init.d/rescue-remote: missing condrestart target. ERROR: alt-specific script %_sbindir/post_service (used in your %post_service macro) depends on condrestart. Please, fix./etc/rc.d/init.d/sysreport: missing condrestart target. ERROR: alt-specific script %_sbindir/post_service (used in your %post_service macro) depends on condrestart. Please, fix.; startup-rescue-0.49.1-alt1.x86_64 init-lsb fail /etc/rc.d/init.d/rescue-remote: not systemd compatible: lsb init header missing and rescue-remote.service is not present. /etc/rc.d/init.d/sysreport: not systemd compatible: lsb init header missing and sysreport.service is not present. See http://www.altlinux.org/Services_Policy for details.; startup-rescue-0.49.1-alt1.x86_64 unsafe-tmp-usage-in-scripts fail The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /etc/rc.d/rc.sysinit.rescue: $ grep /tmp/ /etc/rc.d/rc.sysinit.rescue # Ensure plymouth is not running killall plymouthd >/dev/null 2>&1 remount_aufs() { [ "$1" ] || return 0 mkdir "/tmp/root$1" mount -n -t aufs -o dirs="/tmp/root$1=rw:$1=ro" "/tmp/root$1" "$1" } # Avoid double-aufs/overlayfs attempt if ! grep -qE "^overlay|/ aufs" /proc/mounts; then for mpoint in /etc /var /lib /bin /sbin /home /root /mnt; do -- action "Mounting efivars filesystem:" mount -t efivarfs none /sys/firmware/efi/efivars fi # run tmpfiles.d scripts if systemd_tmpfiles="$(find_util systemd-tmpfiles)"; then "$systemd_tmpfiles" --clean >/tmp/tmpfiles.log 2>&1 "$systemd_tmpfiles" --remove --create --boot --exclude-prefix=/dev >>/tmp/tmpfiles.log 2>&1 fi # Recover mdadm.conf if it's been changed above if [ -s "$MDCONF" ]; then sed -i 's,^DEVICE /dev/null,DEVICE partitions,' "$MDCONF"; system-config-printer-1.5.18-alt2.1.x86_64 freedesktop-desktop info desktop-file-validate utility printed the following message(s): /usr/share/applications/system-config-printer.desktop: hint: value "System;Settings;HardwareSettings;Printing;GTK;" for key "Categories" in group "Desktop Entry" contains more than one main category; application might appear more than once in the application menu; system-config-printer-lib-1.5.18-alt2.1.x86_64 arch-dep-package-has-big-usr-share info The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.; system-config-printer-lib-1.5.18-alt2.1.x86_64 dbus-xml-not-in-devel info file /usr/share/dbus-1/interfaces/org.fedoraproject.Config.Printing.xml is not used in run time. Move it to the -devel subpackage.; task-auth-ad-sssd-0.44.9-alt1.x86_64 missing-url info Missing Url: in a package.; task-auth-ad-winbind-0.44.9-alt1.x86_64 missing-url info Missing Url: in a package.; task-auth-freeipa-0.44.9-alt1.x86_64 missing-url info Missing Url: in a package.; task-auth-ldap-sssd-0.44.9-alt1.x86_64 missing-url info Missing Url: in a package.; trsec-1.0-alt2.x86_64 missing-url info Missing Url: in a package.; trsec-debuginfo-1.0-alt2.x86_64 missing-url info Missing Url: in a package.; volumes-profile-centaurus-0.14-alt1.noarch rpm-filesystem-conflict-file-file warn File /usr/share/install2/initinstall.d/10-vm-profile.sh conflicts with the package volumes-profile-regular-0.5.1-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; .; ives.; volumes-profile-cliff-server-0.18-alt1.noarch rpm-filesystem-conflict-file-file warn File /usr/share/install2/initinstall.d/10-vm-profile.sh conflicts with the package volumes-profile-regular-0.5.1-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; .; ives.; volumes-profile-master-0.2-alt1.noarch rpm-filesystem-conflict-file-file warn File /usr/share/install2/initinstall.d/10-vm-profile.sh conflicts with the package volumes-profile-regular-0.5.1-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.; .; ives.; xorg-conf-right-click-ungrab-0.1-alt1.noarch missing-url info Missing Url: in a package.; zram-swap-0.2-alt4.noarch init-but-no-native-systemd info The package have SysV init script(s) but no native systemd files.; zram-swap-0.2-alt4.noarch init-lsb warn /etc/rc.d/init.d/zram-swap: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.; zram-swap-0.2-alt4.noarch missing-url info Missing Url: in a package.;