Repocop reports by acl

	packager	rpm id	test	status	message
	@core	bind-9.18.42-alt1.src	specfile-useradd-n	warn	-n in useradd is compat option and can be removed any time. Use -N instead.
	@core	bind-9.18.42-alt1.x86_64	init-lsb	fail	/etc/rc.d/init.d/bind: not systemd compatible: lsb init header missing and bind.service is not present. See http://www.altlinux.org/Services_Policy for details.
	@core	bind-9.18.42-alt1.x86_64	sisyphus_check	fail	sisyphus_check failed: /ALT/Sisyphus/files/x86_64/RPMS/bind-9.18.42-alt1.x86_64.rpm: Invalid path names: /usr/lib/tmpfiles.d/bind.conf sisyphus_check: check-fhs ERROR: FHS violation
	@core	bootloader-utils-0.5.5-alt1.noarch	missing-url	info	Missing Url: in a package.
	aris	bumblebee-3.2.1-alt12.src	altlinux-policy-obsolete-buildreq	warn	Build dependency on rpm-build-ubt is obsolete and should be dropped to get rid of rpm-build-ubt package.
	aris	bumblebee-3.2.1-alt12.x86_64	init-condrestart	fail	/etc/rc.d/init.d/bumblebeed: missing condstop target. ERROR: alt-specific script %_sbindir/preun_service (used in your %preun_service macro) depends on condstop. Please, fix.
	armatik	volumes-profile-alt-workstation-1.1-alt1.noarch	rpm-filesystem-conflict-file-file	warn	File /usr/share/install2/initinstall.d/10-vm-profile.sh conflicts with the package volumes-profile-regular-0.5.2-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives. . ives.
	boyarsh	installer-common-base-stage2-1.16.32-alt1.x86_64	systemd-but-no-native-init	experimental	The package have native systemd file(s) but no SysV init scripts.
	boyarsh	installer-common-base-stage2-1.16.32-alt1.x86_64	unsafe-tmp-usage-in-scripts	fail	The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /usr/share/install2/preinstall.d/90-setup-bootloader.sh: $ grep /tmp/ /usr/share/install2/preinstall.d/90-setup-bootloader.sh #!/bin/sh . install2-init-functions script="$(basename $0)" echo "#!/bin/sh" > /tmp/"$script" chmod +x /tmp/"$script" exec_chroot sh "rpm '%{name}\n'| grep 'branding.*bootloader' | xargs bash \"rpm '%{postin}' {} \"" >>/tmp/"$script" exec_chroot /tmp/"$script" 1 ||: Found error in /usr/share/install2/preinstall.d/65-setup-control.sh: $ grep /tmp/ /usr/share/install2/preinstall.d/65-setup-control.sh [ /usr/share/install2/control ] || exit 0 while read facility state; do [ "$facility" "$state" ] || chroot $destdir control "$facility" "$state" ||: done < /usr/share/install2/control >> /tmp/install2.log 2>&1 Found error in /usr/libexec/install2/install2: $ grep /tmp/ /usr/libexec/install2/install2 charset=utf8 cmdline="$(cat /proc/cmdline)" stderr_to_log() { exec 4>&2 2>/tmp/install2.log } stderr_to_stderr() { exec 2>&4 { AUTOINSTALL= export AUTOINSTALL if cmdline_has_arg ai ; then AUTOINSTALL='/tmp/metadata/autoinstall.scm' fi shell_config_set "$install_variables" AUTOINSTALL "$AUTOINSTALL" } set_cdromdev() -- mkdir -p -m700 -- "$destdir/root/.install-log" # Copy alteratord.log from temporary dir to /tmp cp /run/alteratord/alteratord.log /tmp ||: # save logs for f in initinstall preinstall postinstall install2 pkg-install remount alteratord x11; do [ -f "/tmp/$f.log" ] || continue sed -r 's;( passwd_?([12]|auto) ")([^"]|[\\]["])*";\1*";g' <"/tmp/$f.log" \ >"$destdir/root/.install-log"/"$f.log" done # save screenshots mkdir -p -m700 -- "$destdir/root/.install-log/screenshots" for f in /tmp/alterator-screenshot-*.*; do [ ! -f "$f" ] || cp "$f" "$destdir"/root/.install-log/screenshots/ ||: done } x11presetdrv() { [ -n "$INSTALL2_INIT" ] || return 0 [ -f /etc/rc.d/init.d/x11presetdrv ] || return 0 service x11presetdrv start 2>/tmp/x11presetdrv.log update_splash x11presetdrv } if [ -z "$INSTALL2_INIT" ]; then > /tmp/install2.log chmod 600 /tmp/install2.log stderr_to_log fi # Mount touch /var/rw-test || action 'Mounting filesystems' mount_fs -- rm -r /var/lock/ fi # Create tmpfiles [ -z "$INSTALL2_INIT" ] || systemd-tmpfiles --remove --create --boot --exclude-prefix=/dev >/tmp/tmpfiles.log 2>&1 # do not assemble raid automatically (restore with start_mdraid) if [ -s /lib/udev/rules.d/64-md-raid-assembly.rules ]; then mv /lib/udev/rules.d/64-md-raid-assembly.rules /tmp fi [ -z "$INSTALL2_INIT" ] || service udevd start 2>/tmp/udevd.log update_splash udev x11presetdrv set_alterator_datadir -- set_device update_splash device # create empty logs with strict rights > /tmp/initinstall.log > /tmp/preinstall.log > /tmp/postinstall.log > /tmp/wizard.log > /tmp/pkg-install.log > /tmp/x11.log chmod 600 /tmp/initinstall.log chmod 600 /tmp/preinstall.log chmod 600 /tmp/postinstall.log chmod 600 /tmp/wizard.log chmod 600 /tmp/pkg-install.log chmod 600 /tmp/x11.log # create destination directory mkdir -p "$destdir" [ -n "$DISPLAY" ] || [ -n "$WAYLAND_DISPLAY" ] || "$install2_bindir"/initinstall 2>>/tmp/initinstall.log | tee -a /tmp/initinstall.log update_splash finish if_run_debug_shell rc=0 -- chmod 700 /run/user/0 export XDG_RUNTIME_DIR=/run/user/0 export WLR_NO_HARDWARE_CURSORS=1 cmd="cage -d -s "$install2_bindir"/alterator-install2" chvt 7 $cmd >/tmp/install2.log 2>&1 chvt 1 else cmd="xinit "$install2_bindir"/alterator-install2 -- $xinit_args" echo 'Starting Xorg server...' auto_drivers="$(video_scan -s drivers)" xinit_args='vt7 -dpms -ac -nolisten tcp -logfile /tmp/x11.log' eval $(grep -s ^xinit_args= /etc/xserver-args) ||: if ! $cmd >/tmp/install2.log 2>&1 ; then for drv in $auto_drivers; do # xinit must failed before run alterator-wizard [ ! -s /tmp/wizard.log ] || break echo "Error running Xorg server, trying with driver $drv..." "$install2_bindir"/xorg_conf_setup "$drv" "$XORG_CONF" rc=0 $cmd >>/tmp/install2.log 2>&1 && break || rc=$? done fi fi fi fi fi if_run_debug_shell [ "$rc" -ne 0 ] || "$install2_bindir"/postinstall 2>>/tmp/postinstall.log | tee -a /tmp/postinstall.log save_logs # Unmount destination if [ -z "$INSTALL2_INIT" ]; then Found error in /usr/libexec/install2/alterator-vnc: $ grep -A5 -B5 /tmp/ /usr/libexec/install2/alterator-vnc export FD_GEOM=1024x768 export FD_PROG="$install2_bindir"/alterator-install2 CAGE=/usr/bin/cage ALTERATOR_VNC_SERVER_W=/usr/bin/wayvnc WAYVNC_CONF_FILE=/tmp/vnc_conf vncip="$(cmdline_get_arg vncip)" if ! [ -n "$vncip" ]; then vncip="0.0.0.0" fi -- export WLR_BACKENDS=headless export WLR_LIBINPUT_NO_DEVICES=1 export WLR_RENDERER=pixman export WLR_NO_HARDWARE_CURSORS=1 wayvnc_passwd ssh-keygen -m pem -f /tmp/rsa_key.pem -t rsa -N "" $install2_bindir/vnc_info wayland $CAGE -d $FD_PROG & $ALTERATOR_VNC_SERVER_W --config $WAYVNC_CONF_FILE > /tmp/wayvnc.log 2>&1 } xvnc(){ if [ -n "$DISPLAY" ]; then VNC="x11vnc" -- VNC="x11vnc -create" fi if [ -n "$host_connect" ]; then $VNC -connect "$host_connect" else $VNC -storepasswd "$password" /tmp/vncpasswd chmod 600 /tmp/vncpasswd xvncpam=$([ -n "$password" ] && echo "-usepw -rfbauth /tmp/vncpasswd" || echo "-nopw") $install2_bindir/vnc_info $VNC -quiet -listen "$vncip" $xvncpam -o /tmp/x11vnc.log fi } vnc
	boyarsh	installer-common-desktop-1.16.32-alt1.noarch	freedesktop-categories	warn	Menu-related Additional Categories (http://standards.freedesktop.org/menu-spec/latest/apa.html) not found in /usr/share/applications/install2.desktop. Please add it or report a bug against this test if you already have registered one (not including menu unrelated ones as Core or Qt).
	boyarsh	livecd-save-nfs-0.4.2-alt1.noarch	init-condrestart	fail	/etc/rc.d/init.d/livecd-save-nfs: missing condrestart target. Note: alt-specific script %_sbindir/post_service (used in %post_service macro) depends on condrestart. It is wise to add condrestart anyway./etc/rc.d/init.d/livecd-save-nfs: missing condstop target. ERROR: alt-specific script %_sbindir/preun_service (used in your %preun_service macro) depends on condstop. Please, fix.
	boyarsh	livecd-save-nfs-0.4.2-alt1.noarch	init-lsb	warn	/etc/rc.d/init.d/livecd-save-nfs: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
	boyarsh	livecd-save-nfs-0.4.2-alt1.noarch	missing-url	info	Missing Url: in a package.
	glebfm	nitrokey-app-1.4.2-alt2.x86_64	freedesktop-desktop	info	desktop-file-validate utility printed the following message(s): /usr/share/applications/nitrokey-app.desktop: hint: value item "Security" in key "Categories" in group "Desktop Entry" can be extended with another category among the following categories: Settings, or System
	legion	ca-certificates-2025.11.23-alt1.noarch	missing-url	info	Missing Url: in a package.
	manowar	alterator-5.4.5-alt1.x86_64	init-lsb	fail	/etc/rc.d/init.d/alteratord: not systemd compatible: lsb init header missing and alteratord.service is not present. See http://www.altlinux.org/Services_Policy for details.
	manowar	alterator-5.4.5-alt1.x86_64	sisyphus_check	fail	sisyphus_check failed: /ALT/Sisyphus/files/x86_64/RPMS/alterator-5.4.5-alt1.x86_64.rpm: Invalid path names: /usr/lib/tmpfiles.d/alterator.conf sisyphus_check: check-fhs ERROR: FHS violation
	rider	audit-4.1.2-alt2.x86_64	init-lsb	fail	/etc/rc.d/init.d/auditd: not systemd compatible: lsb init header missing and auditd.service is not present. See http://www.altlinux.org/Services_Policy for details.
	rider	audit-4.1.2-alt2.x86_64	sisyphus_check	fail	sisyphus_check failed: /ALT/Sisyphus/files/x86_64/RPMS/audit-4.1.2-alt2.x86_64.rpm: Invalid path names: /usr/lib/tmpfiles.d/audit.conf sisyphus_check: check-fhs ERROR: FHS violation
	rider	csync2-2.0-alt3.x86_64	init-lsb	fail	/etc/rc.d/init.d/csync2: not systemd compatible: lsb init header missing and csync2.service is not present. See http://www.altlinux.org/Services_Policy for details.
	rider	csync2-2.0-alt3.x86_64	systemd-check-socket-name	experimental	in csync2-2.0-alt3.x86_64: there is a socket csync2.socket but no service csync2.service. Ask ildar@ why it is not right.
	sem	ModemManager-1.24.2-alt1.x86_64	sisyphus_check	fail	sisyphus_check failed: /ALT/Sisyphus/files/x86_64/RPMS/ModemManager-1.24.2-alt1.x86_64.rpm: invalid udev rules path: /usr/lib/udev/rules.d/77-mm-broadmobi-port-types.rules /usr/lib/udev/rules.d/77-mm-cellient.rules /usr/lib/udev/rules.d/77-mm-cinterion-port-types.rules /usr/lib/udev/rules.d/77-mm-dell-port-types.rules /usr/lib/udev/rules.d/77-mm-dlink-port-types.rules /usr/lib/udev/rules.d/77-mm-ericsson-mbm.rules /usr/lib/udev/rules.d/77-mm-fibocom-port-types.rules /usr/lib/udev/rules.d/77-mm-foxconn-port-types.rules /usr/lib/udev/rules.d/77-mm-gosuncn-port-types.rules /usr/lib/udev/rules.d/77-mm-haier-port-types.rules /usr/lib/udev/rules.d/77-mm-huawei-net-port-types.rules /usr/lib/udev/rules.d/77-mm-linktop-port-types.rules /usr/lib/udev/rules.d/77-mm-longcheer-port-types.rules /usr/lib/udev/rules.d/77-mm-mtk-legacy-port-types.rules /usr/lib/udev/rules.d/77-mm-netprisma-port-types.rules /usr/lib/udev/rules.d/77-mm-nokia-port-types.rules /usr/lib/udev/rules.d/77-mm-qcom-soc.rules /usr/lib/udev/rules.d/77-mm-quectel-port-types.rules /usr/lib/udev/rules.d/77-mm-rolling-port-types.rules /usr/lib/udev/rules.d/77-mm-sierra.rules /usr/lib/udev/rules.d/77-mm-simtech-port-types.rules /usr/lib/udev/rules.d/77-mm-telit-port-types.rules /usr/lib/udev/rules.d/77-mm-tplink-port-types.rules /usr/lib/udev/rules.d/77-mm-ublox-port-types.rules /usr/lib/udev/rules.d/77-mm-x22x-port-types.rules /usr/lib/udev/rules.d/77-mm-zte-port-types.rules /usr/lib/udev/rules.d/80-mm-candidate.rules sisyphus_check: check-udev ERROR: udev rules path violation
	sem	NetworkManager-applet-gtk-1.36.0-alt3.x86_64	arch-dep-package-has-big-usr-share	info	The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
	sem	NetworkManager-applet-gtk-1.36.0-alt3.x86_64	freedesktop-categories	warn	Menu-related Additional Categories (http://standards.freedesktop.org/menu-spec/latest/apa.html) not found in /usr/share/applications/nm-connection-editor.desktop. Please add it or report a bug against this test if you already have registered one (not including menu unrelated ones as Core or Qt).
	sem	NetworkManager-cloud-setup-1.55.90-alt1.x86_64	systemd-but-no-native-init	experimental	The package have native systemd file(s) but no SysV init scripts.
	sem	NetworkManager-config-server-1.55.90-alt1.noarch	file-in-usr-marked-as-conffile	warn	Files below /usr may not be marked as conffiles, since /usr might be mounted read-only and thus, the local system administrator would not have a chance to modify this configuration file.
	sem	NetworkManager-daemon-1.55.90-alt1.x86_64	arch-dep-package-has-big-usr-share	info	The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
	sem	NetworkManager-daemon-1.55.90-alt1.x86_64	file-in-usr-marked-as-conffile	warn	Files below /usr may not be marked as conffiles, since /usr might be mounted read-only and thus, the local system administrator would not have a chance to modify this configuration file.
	sem	NetworkManager-daemon-1.55.90-alt1.x86_64	sisyphus_check	fail	sisyphus_check failed: /ALT/Sisyphus/files/x86_64/RPMS/NetworkManager-daemon-1.55.90-alt1.x86_64.rpm: invalid udev rules path: /usr/lib/udev/rules.d/84-nm-drivers.rules /usr/lib/udev/rules.d/85-nm-unmanaged.rules /usr/lib/udev/rules.d/90-nm-thunderbolt.rules sisyphus_check: check-udev ERROR: udev rules path violation
	sem	NetworkManager-iodine-1.2.1-alt3.gd0e5d85.x86_64	file-in-usr-marked-as-conffile	warn	Files below /usr may not be marked as conffiles, since /usr might be mounted read-only and thus, the local system administrator would not have a chance to modify this configuration file.
	sem	NetworkManager-l2tp-1.20.20-alt1.x86_64	file-in-usr-marked-as-conffile	warn	Files below /usr may not be marked as conffiles, since /usr might be mounted read-only and thus, the local system administrator would not have a chance to modify this configuration file.
	sem	NetworkManager-openvpn-1.12.3-alt1.x86_64	file-in-usr-marked-as-conffile	warn	Files below /usr may not be marked as conffiles, since /usr might be mounted read-only and thus, the local system administrator would not have a chance to modify this configuration file.
	sem	NetworkManager-pptp-1.2.12-alt2.x86_64	file-in-usr-marked-as-conffile	warn	Files below /usr may not be marked as conffiles, since /usr might be mounted read-only and thus, the local system administrator would not have a chance to modify this configuration file.
	sem	NetworkManager-ssh-1.4.2-alt1.x86_64	file-in-usr-marked-as-conffile	warn	Files below /usr may not be marked as conffiles, since /usr might be mounted read-only and thus, the local system administrator would not have a chance to modify this configuration file.
	sem	NetworkManager-vpnc-1.4.0-alt1.x86_64	file-in-usr-marked-as-conffile	warn	Files below /usr may not be marked as conffiles, since /usr might be mounted read-only and thus, the local system administrator would not have a chance to modify this configuration file.
	sem	PokerTH-data-1.1.2-alt8.noarch	iconsdir	experimental	Please, move pixmaps from /usr/share/pixmaps to %_liconsdir, %_niconsdir, %_miconsdir according to their size. See http://www.altlinux.org/IconPathsPolicy.
	sem	alt-os-release-0.3.0-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	alterator-fbi-5.49.4-alt1.src	specfile-useradd-n	warn	-n in useradd is compat option and can be removed any time. Use -N instead.
	sem	alterator-fbi-5.49.4-alt1.x86_64	init-lsb	warn	/etc/rc.d/init.d/ahttpd: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
	sem	alterator-fbi-5.49.4-alt1.x86_64	subdir-in-var-run	info	Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.
	sem	alterator-net-domain-0.7.3-alt4.x86_64	unsafe-tmp-usage-in-scripts	fail	The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /usr/lib/alterator/backend3/net-domain: $ grep /tmp/ /usr/lib/alterator/backend3/net-domain ## https://www.altlinux.org/ActiveDirectory/DC ad_provision_domain() { local domain_name="$1" shift local log="/tmp/samba-dc-provision-$(date +%d.%m.%Y-%H:%M:%S)-$domain_name.log" # Begin log date > "$log" echo "Domain: $domain_name" >> "$log" echo >> "$log" if [ "$in_domain_type" = 'ad' ]; then if ipa_install_running; then ipa_install_stop fi env > /tmp/net-domain.txt ad_current_domain="$($samba_tool domain info '127.0.0.1' | sed 's/ *: /:/' | sed -n 's/^Domain://p')" # Check creation of existing domain if [ "$ad_current_domain" != "$in_domain" ]; then write_domain "$in_domain" "1"
	sem	atril-gtk-1.27.0-alt2.x86_64	arch-dep-package-has-big-usr-share	info	The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
	sem	atril-gtk-dvi-1.27.0-alt2.x86_64	rpm-filesystem-conflict-file-file	warn	File /usr/lib64/atril/3/backends/libdvidocument.so conflicts with the package mate-document-viewer-dvi-1.28.2-alt1.x86_64. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
	sem	branding-simply-linux-11.0.900-alt1.src	requires-ImageMagick	info	Dependency on ImageMagick (compat package) found. It probably should be replaced with more specific dependency like /usr/bin/convert or ImageMagick-tools, or it can be already autodetected by findreq-shell.
	sem	branding-simply-linux-xfce-settings-11.0.900-alt1.x86_64	rpm-filesystem-conflict-file-file	warn	File /etc/skel/.gtkrc-2.0 conflicts with the package branding-xalt-kworkstation-graphics-11.2.0-alt1.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
	sem	ca-trust-0.2.0-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	ca-trust-directory-hash-0.2.0-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	ca-trust-java-0.2.0-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	claws-mail-4.3.1-alt2.x86_64	arch-dep-package-has-big-usr-share	info	The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
	sem	clawsker-1.4.1-alt1.noarch	freedesktop-categories	warn	Menu-related Additional Categories (http://standards.freedesktop.org/menu-spec/latest/apa.html) not found in /usr/share/applications/clawsker.desktop. Please add it or report a bug against this test if you already have registered one (not including menu unrelated ones as Core or Qt).
	sem	consolehelper-0.3.2-alt1.x86_64	missing-url	info	Missing Url: in a package.
	sem	consolehelper-debuginfo-0.3.2-alt1.x86_64	missing-url	info	Missing Url: in a package.
	sem	cpufreq-simple-1.1.2-alt1.noarch	init-lsb	fail	/etc/rc.d/init.d/cpufreq-simple: not systemd compatible: lsb init header missing and cpufreq-simple.service is not present. See http://www.altlinux.org/Services_Policy for details.
	sem	cpufreq-simple-1.1.2-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	cpufreq-simple-1.1.2-alt1.noarch	sisyphus_check	fail	sisyphus_check failed: /ALT/Sisyphus/files/noarch/RPMS/cpufreq-simple-1.1.2-alt1.noarch.rpm: invalid udev rules path: /usr/lib/udev/rules.d/96-cpufreq-simple.rules sisyphus_check: check-udev ERROR: udev rules path violation
	sem	dhcp-omshell-4.4.3.P1-alt2.x86_64	bin-permissions	info	not executable file /usr/bin/omshell
	sem	dhcp-relay-4.4.3.P1-alt2.x86_64	init-lsb	warn	/etc/rc.d/init.d/dhcrelay: lsb init header missing. /etc/rc.d/init.d/dhcrelay6: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
	sem	dhcp-server-4.4.3.P1-alt2.x86_64	init-lsb	warn	/etc/rc.d/init.d/dhcpd: lsb init header missing. /etc/rc.d/init.d/dhcpd6: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
	sem	dnsmasq-2.91-alt1.x86_64	file-in-usr-marked-as-conffile	warn	Files below /usr may not be marked as conffiles, since /usr might be mounted read-only and thus, the local system administrator would not have a chance to modify this configuration file.
	sem	dnsmasq-2.91-alt1.x86_64	init-lsb	fail	/etc/rc.d/init.d/dnsmasq: not systemd compatible: lsb init header missing and dnsmasq.service is not present. See http://www.altlinux.org/Services_Policy for details.
	sem	dnsmasq-2.91-alt1.x86_64	rpm-filesystem-conflict-dir-file-or-symlink	fail	file or symlink /etc/dnsmasq.d is a directory in package pi-hole-6.3-alt1.noarch. Moreover, the packages have no explicit conflicts on each other. It is very bad, because simultaneous installaion of those packages, if not prevented by file conflicts, can produce uninspected results. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives.
	sem	etcnet-0.9.35-alt1.noarch	init-condrestart	warn	/etc/rc.d/init.d/network: missing condrestart target. Note: alt-specific script %_sbindir/post_service (used in %post_service macro) depends on condrestart. It is wise to add condrestart anyway./etc/rc.d/init.d/network: missing condstop target. Note: alt-specific script %_sbindir/preun_service (used in %preun_service macro) depends on condstop. It is wise to add condstop anyway.
	sem	etcnethook-services-restart-0.0.1-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	firewall-config-2.4.0-alt1.noarch	freedesktop-desktop	info	desktop-file-validate utility printed the following message(s): /usr/share/applications/firewall-config.desktop: hint: value "System;Settings;Security;" for key "Categories" in group "Desktop Entry" contains more than one main category; application might appear more than once in the application menu
	sem	firewalld-2.4.0-alt1.noarch	file-in-usr-marked-as-conffile	warn	Files below /usr may not be marked as conffiles, since /usr might be mounted read-only and thus, the local system administrator would not have a chance to modify this configuration file.
	sem	flare-engine-1.14-alt1.x86_64	arch-dep-package-has-big-usr-share	info	The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
	sem	hostname-hook-hosts-5.2.11-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	installer-distro-simply-linux-stage2-11.5.2-alt1.noarch	rpm-filesystem-conflict-file-file	warn	Files /usr/share/install2/alterator-menu/module-expert-list /usr/share/install2/installer-steps conflict with the package installer-distro-virtualization-pve-stage2-11.0.0-alt0.4.noarch. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives. ing alternatives.
	sem	iputils-20250605-alt1.x86_64	file-in-usr-marked-as-conffile	warn	Files below /usr may not be marked as conffiles, since /usr might be mounted read-only and thus, the local system administrator would not have a chance to modify this configuration file.
	sem	libguile-vhttpd-0.7.13-alt2.x86_64	missing-url	info	Missing Url: in a package.
	sem	libguile-vhttpd-debuginfo-0.7.13-alt2.x86_64	missing-url	info	Missing Url: in a package.
	sem	libvhttpd-0.7.13-alt2.x86_64	missing-url	info	Missing Url: in a package.
	sem	libvhttpd-debuginfo-0.7.13-alt2.x86_64	missing-url	info	Missing Url: in a package.
	sem	libvhttpd-devel-0.7.13-alt2.x86_64	missing-url	info	Missing Url: in a package.
	sem	livecd-timezone-0.1.1-alt1.noarch	init-lsb	warn	/etc/rc.d/init.d/livecd-timezone: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
	sem	livecd-timezone-0.1.1-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	menulibre-2.2.3-alt1.noarch	freedesktop-desktop	info	desktop-file-validate utility printed the following message(s): /usr/share/applications/menulibre.desktop: hint: value "GNOME;GTK;Settings;DesktopSettings;Utility;" for key "Categories" in group "Desktop Entry" contains more than one main category; application might appear more than once in the application menu
	sem	mousepad-0.6.5-alt1.x86_64	altlinux-policy-shared-lib-contains-devel-so	info	SharedLibs Policy Draft violation: Shared Lib package should not contain symlink /usr/lib64/libmousepad.so but just /usr/lib64/libmousepad.so.0.0.0. According to SharedLibs Policy Draft, symlink /usr/lib64/libmousepad.so should be placed in a special subpackage named lib-devel. If you have already packaged this symlink in lib-devel, just append \%exclude /usr/lib64/libmousepad.so to \%files of mousepad-0.6.5-alt1.x86_64. Otherwise, move the symlink into the subpackage lib-devel. There is a known exception for case the .so file is not a shared lib but a plugin that is never directly linked with. Please report such a case to repocop test.
	sem	nginx-webapps-0.2.0-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	nginx-webapps-ssl-0.2.0-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	pa-conf-switch-on-connect-0.1-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	powermgmt-base-1.38-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	radvd-2.20-alt1.x86_64	file-in-usr-marked-as-conffile	warn	Files below /usr may not be marked as conffiles, since /usr might be mounted read-only and thus, the local system administrator would not have a chance to modify this configuration file.
	sem	radvd-2.20-alt1.x86_64	init-lsb	fail	/etc/rc.d/init.d/radvd: not systemd compatible: lsb init header missing and radvd.service is not present. See http://www.altlinux.org/Services_Policy for details.
	sem	radvd-2.20-alt1.x86_64	sisyphus_check	fail	sisyphus_check failed: /ALT/Sisyphus/files/x86_64/RPMS/radvd-2.20-alt1.x86_64.rpm: Invalid path names: /usr/lib/tmpfiles.d/radvd.conf sisyphus_check: check-fhs ERROR: FHS violation
	sem	rdnssd-1.0.8-alt2.x86_64	sisyphus_check	fail	sisyphus_check failed: /ALT/Sisyphus/files/x86_64/RPMS/rdnssd-1.0.8-alt2.x86_64.rpm: Invalid path names: /usr/lib/tmpfiles.d/rdnssd.conf sisyphus_check: check-fhs ERROR: FHS violation
	sem	rdnssd-1.0.8-alt2.x86_64	subdir-in-var-run	info	Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them.
	sem	rp-pppoe-client-3.15-alt2.noarch	init-but-no-native-systemd	info	The package have SysV init script(s) but no native systemd files.
	sem	rp-pppoe-client-3.15-alt2.noarch	init-condrestart	warn	/etc/rc.d/init.d/pppoe: missing condrestart target. Note: alt-specific script %_sbindir/post_service (used in %post_service macro) depends on condrestart. It is wise to add condrestart anyway./etc/rc.d/init.d/pppoe: missing condstop target. Note: alt-specific script %_sbindir/preun_service (used in %preun_service macro) depends on condstop. It is wise to add condstop anyway.
	sem	rp-pppoe-client-3.15-alt2.noarch	init-lsb	fail	/etc/rc.d/init.d/pppoe: not systemd compatible: lsb init header missing and pppoe.service is not present. See http://www.altlinux.org/Services_Policy for details.
	sem	snort-2.9.17.1-alt1.x86_64	alt-alternatives-vs-ghost	info	Since alternatives 0.4 the practice to own alternative symlinks as ghost files is deprecated. the ghost file /usr/sbin/snort is an alternative in package snort-plain+flexresp-2.9.17.1-alt1.x86_64. Consider removing the ghost file /usr/sbin/snort.
	sem	snort-2.9.17.1-alt1.x86_64	init-but-no-native-systemd	info	The package have SysV init script(s) but no native systemd files.
	sem	snort-2.9.17.1-alt1.x86_64	init-lsb	fail	/etc/rc.d/init.d/snortd: not systemd compatible: lsb init header missing and snortd.service is not present. See http://www.altlinux.org/Services_Policy for details.
	sem	stardict-3.0.6-alt1.1.x86_64	arch-dep-package-has-big-usr-share	info	The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
	sem	stardict-3.0.6-alt1.1.x86_64	iconsdir	experimental	Please, move pixmaps from /usr/share/pixmaps to %_liconsdir, %_niconsdir, %_miconsdir according to their size. See http://www.altlinux.org/IconPathsPolicy.
	sem	thunar-4.20.6-alt2.x86_64	arch-dep-package-has-big-usr-share	info	The package has a significant amount of architecture-independent data in /usr/share, while it is an architecture-dependent package. This is wasteful of mirror space and bandwidth, as we then end up with multiple copies of this data, one for each architecture. If the data in /usr/share is not architecture-independent, it is a policy violation, and in this case, you should move that data elsewhere.
	sem	thunar-4.20.6-alt2.x86_64	freedesktop-desktop	info	desktop-file-validate utility printed the following message(s): /usr/share/applications/thunar-bulk-rename.desktop: warning: value "????? ???? ?????? ??????? ??????????" for key "Comment[ka]" in group "Desktop Entry" looks the same as that of key "Name[ka]" /usr/share/applications/thunar-bulk-rename.desktop: warning: value "Hromadn? premenovanie" for key "Comment[sk]" in group "Desktop Entry" looks the same as that of key "Name[sk]"
	sem	ulogd-2.0.8-alt1.x86_64	init-lsb	warn	/etc/rc.d/init.d/ulogd: lsb init header missing. See http://www.altlinux.org/Services_Policy for details.
	sem	usb-modeswitch-2.6.1-alt4.x86_64	systemd-but-no-native-init	experimental	The package have native systemd file(s) but no SysV init scripts.
	sem	vconsole-setup-kludge-0.1-alt1.noarch	missing-url	info	Missing Url: in a package.
	sem	vconsole-setup-kludge-0.1-alt1.noarch	systemd-but-no-native-init	experimental	The package have native systemd file(s) but no SysV init scripts.
	sem	vhttpd-utils-0.7.13-alt2.x86_64	missing-url	info	Missing Url: in a package.
	sem	vhttpd-utils-debuginfo-0.7.13-alt2.x86_64	missing-url	info	Missing Url: in a package.
	sem	xfce4-genmon-plugin-4.3.0-alt1.x86_64	fail	The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /usr/share/xfce4/genmon/scripts/gmail: $ grep /tmp/ /usr/share/xfce4/genmon/scripts/gmail ############################################## # don't change anything below ############################################## # get and save the atom feed curl "$USERNAME":"$PASSWORD" "https://mail.google.com/mail/feed/atom" > /tmp/.gmail # get number of unread messages num_messages=$(grep "(?<=)[^<]+" /tmp/.gmail) # get last checked time last_checked=$(grep "(?<=)[^<]+" /tmp/.gmail | TZ=$TIMEZONE date +'%r') # get ids, senders and subjects mapfile < <(grep "(?<=)[^<]+" /tmp/.gmail | awk '{print $3}') mapfile < <(grep "(?<=)[^<]+" /tmp/.gmail) mapfile < <(grep "(?<=