2008-04-17 04:52:37 +02:00
|
|
|
# -*- python -*-
|
2012-03-20 09:34:26 +01:00
|
|
|
# vim: syntax=python sw=4 et
|
2008-04-17 04:52:37 +02:00
|
|
|
# Configuration for the rpmlint utility.
|
|
|
|
|
# Loaded before ~/.rpmlintrc
|
|
|
|
|
# $Id: config,v 1.39 2003/12/22 11:20:55 flepied Exp $
|
|
|
|
|
|
|
|
|
|
# This line is mandatory to access the configuration functions
|
|
|
|
|
from Config import *
|
2011-04-21 12:12:02 +02:00
|
|
|
from Filter import addDetails
|
2008-04-17 04:52:37 +02:00
|
|
|
|
|
|
|
|
# Additionale path to look for checks
|
|
|
|
|
|
|
|
|
|
#addCheckDir("~/mandrake/rpmlint")
|
|
|
|
|
|
|
|
|
|
# Configure the checks if you don't want the default ones
|
|
|
|
|
|
|
|
|
|
allChecks()
|
|
|
|
|
|
|
|
|
|
addCheck("CheckBuildRoot")
|
|
|
|
|
addCheck("CheckExecDocs")
|
|
|
|
|
addCheck("CheckPkgConfig")
|
|
|
|
|
addCheck("CheckCommonFiles")
|
|
|
|
|
addCheck("CheckInitScripts")
|
|
|
|
|
addCheck("DuplicatesCheck")
|
|
|
|
|
addCheck("LibraryPolicyCheck")
|
|
|
|
|
addCheck("CheckIconSizes")
|
|
|
|
|
#addCheck("CheckStaticLibraries")
|
2008-04-21 18:36:30 +02:00
|
|
|
addCheck("BrandingPolicyCheck")
|
2008-11-01 23:14:12 +01:00
|
|
|
addCheck("CheckSUIDPermissions")
|
2008-12-15 15:05:00 +01:00
|
|
|
# polkit-default-privs would need to be installed always
|
2010-02-26 01:10:53 +01:00
|
|
|
addCheck("CheckPolkitPrivs")
|
2008-12-15 15:05:00 +01:00
|
|
|
addCheck("CheckDBUSServices")
|
2009-01-23 23:37:26 +01:00
|
|
|
addCheck("CheckDBusPolicy")
|
2009-01-09 01:55:09 +01:00
|
|
|
addCheck("CheckFilelist")
|
2008-05-01 14:19:31 +02:00
|
|
|
addCheck("CheckKDE4Deps")
|
|
|
|
|
addCheck("KMPPolicyCheck")
|
2013-06-28 18:07:26 +02:00
|
|
|
addCheck("CheckUpdateAlternatives")
|
2010-08-01 17:30:35 +02:00
|
|
|
addCheck("BashismsCheck")
|
2010-10-28 13:38:59 +02:00
|
|
|
addCheck("CheckBuildDate")
|
2012-02-20 17:06:38 +01:00
|
|
|
addCheck("CheckLogrotate")
|
2012-05-23 14:45:39 +02:00
|
|
|
addCheck("CheckPAMModules")
|
2014-01-30 10:38:00 +01:00
|
|
|
addCheck("CheckRCLinks")
|
2014-03-05 15:07:33 +01:00
|
|
|
addCheck("CheckAppdata")
|
2014-07-18 17:14:09 +02:00
|
|
|
addCheck("CheckSystemdInstall")
|
2015-05-20 10:02:50 +02:00
|
|
|
addCheck("TmpFilesCheck")
|
2008-04-17 04:52:37 +02:00
|
|
|
|
|
|
|
|
# stuff autobuild takes care about
|
|
|
|
|
addFilter(".*invalid-version.*")
|
|
|
|
|
addFilter(".*invalid-packager.*")
|
|
|
|
|
addFilter(".*not-standard-release-extension.*")
|
2010-01-27 18:18:50 +01:00
|
|
|
#addFilter(".*non-standard-group.*")
|
2008-04-17 04:52:37 +02:00
|
|
|
addFilter(".*invalid-buildhost.*")
|
|
|
|
|
addFilter(".*executable-in-library-package.*")
|
|
|
|
|
addFilter(".*non-versioned-file-in-library-package.*")
|
|
|
|
|
addFilter(".*incoherent-version-in-name.*")
|
|
|
|
|
addFilter(".*invalid-vendor.*")
|
|
|
|
|
addFilter(".*invalid-distribution.*")
|
2009-09-16 18:41:21 +02:00
|
|
|
addFilter(".*hardcoded-path-in-buildroot-tag.*")
|
|
|
|
|
addFilter(".*no-buildroot-tag.*")
|
|
|
|
|
addFilter(".*cross-directory-hard-link.*")
|
2008-04-17 04:52:37 +02:00
|
|
|
|
|
|
|
|
# Configuration options used by the checks
|
|
|
|
|
|
|
|
|
|
#setOption("Vendor", "MySelf")
|
|
|
|
|
#setOption("Distribution", "MyDistrib")
|
|
|
|
|
setOption("UseBzip2", 0)
|
|
|
|
|
setOption("UseUTF8", 1)
|
|
|
|
|
#setOption("ReleaseExtension", None)
|
|
|
|
|
#setOption("ValidGroups", ("Group1", "Group2"))
|
|
|
|
|
#setOption("KernelModuleRPMsOK", 0)
|
2011-05-24 16:21:22 +02:00
|
|
|
setOption("CompressExtension", None)
|
2011-05-31 13:31:05 +02:00
|
|
|
setOption('UseVarLockSubsys', False)
|
2014-02-21 15:54:14 +01:00
|
|
|
setOption("BadnessThreshold", 1000)
|
2008-04-17 04:52:37 +02:00
|
|
|
|
2013-09-24 18:12:05 +02:00
|
|
|
setOption('ValidGroups', [])
|
|
|
|
|
|
2011-02-11 01:28:54 +01:00
|
|
|
setOption('StandardGroups', (
|
|
|
|
|
'aegis',
|
|
|
|
|
'antivir',
|
2013-11-20 17:51:25 +01:00
|
|
|
'arangodb',
|
2011-02-11 01:28:54 +01:00
|
|
|
'at',
|
|
|
|
|
'audio',
|
|
|
|
|
'avahi',
|
|
|
|
|
'beagleindex',
|
|
|
|
|
'bigsister',
|
2014-06-20 16:30:34 +02:00
|
|
|
'bitlbee',
|
2011-02-11 01:28:54 +01:00
|
|
|
'bin',
|
2014-03-27 07:15:59 +01:00
|
|
|
'boinc',
|
2011-02-11 01:28:54 +01:00
|
|
|
'casaauth',
|
|
|
|
|
'cdrom',
|
2015-04-24 10:19:24 +02:00
|
|
|
'ceph',
|
2013-06-24 12:26:05 +02:00
|
|
|
'chef',
|
2016-03-29 17:52:49 +02:00
|
|
|
'chrony',
|
2011-11-28 14:22:53 +01:00
|
|
|
'citadel',
|
2012-11-29 13:04:56 +01:00
|
|
|
'colord',
|
2011-02-11 01:28:54 +01:00
|
|
|
'console',
|
2014-10-28 11:18:55 +01:00
|
|
|
'crowbar',
|
2011-02-11 01:28:54 +01:00
|
|
|
'cwbconv',
|
|
|
|
|
'daemon',
|
2014-12-01 16:51:28 +01:00
|
|
|
'davfs2',
|
2011-02-11 01:28:54 +01:00
|
|
|
'dba',
|
2014-07-01 16:22:56 +02:00
|
|
|
'ddclient',
|
2011-02-11 01:28:54 +01:00
|
|
|
'dialout',
|
|
|
|
|
'disk',
|
|
|
|
|
'distcc',
|
|
|
|
|
'dosemu',
|
|
|
|
|
'dovecot',
|
2016-02-15 21:14:20 +01:00
|
|
|
'elasticsearch',
|
2013-02-11 09:35:50 +01:00
|
|
|
'epmd',
|
2011-02-11 01:28:54 +01:00
|
|
|
'festival',
|
|
|
|
|
'ffums',
|
2011-08-05 10:47:05 +02:00
|
|
|
'firebird',
|
2011-02-11 01:28:54 +01:00
|
|
|
'floppy',
|
2013-02-06 13:36:16 +01:00
|
|
|
'fonehome',
|
2011-02-11 01:28:54 +01:00
|
|
|
'ftp',
|
|
|
|
|
'games',
|
|
|
|
|
'geronimo',
|
2016-02-15 21:14:20 +01:00
|
|
|
'guixbuild',
|
2011-02-11 01:28:54 +01:00
|
|
|
'haclient',
|
|
|
|
|
'haldaemon',
|
2011-08-05 10:47:05 +02:00
|
|
|
'hsqldb',
|
|
|
|
|
'icecast',
|
2011-02-11 01:28:54 +01:00
|
|
|
'icecream',
|
2012-08-06 13:24:01 +02:00
|
|
|
'icinga',
|
|
|
|
|
'icingacmd',
|
2011-02-11 01:28:54 +01:00
|
|
|
'ifdrwww',
|
|
|
|
|
'intermezzo',
|
2014-12-03 14:21:27 +01:00
|
|
|
'iouyap',
|
2011-02-11 01:28:54 +01:00
|
|
|
'jboss',
|
2011-08-12 17:57:51 +02:00
|
|
|
'jenkins',
|
2011-08-05 10:47:05 +02:00
|
|
|
'jetty5',
|
2011-02-11 01:28:54 +01:00
|
|
|
'jonas',
|
|
|
|
|
'kmem',
|
2013-01-28 17:23:46 +01:00
|
|
|
'kolab',
|
|
|
|
|
'kolab-n',
|
|
|
|
|
'kolab-r',
|
2011-02-11 01:28:54 +01:00
|
|
|
'kvm',
|
|
|
|
|
'ldap',
|
2014-08-22 11:07:15 +02:00
|
|
|
'libstoragemgmt',
|
2011-08-01 09:22:53 +02:00
|
|
|
'lightdm',
|
2011-02-11 01:28:54 +01:00
|
|
|
'lighttpd',
|
|
|
|
|
'localham',
|
2013-05-31 14:29:31 +02:00
|
|
|
'locate',
|
2011-02-11 01:28:54 +01:00
|
|
|
'lp',
|
|
|
|
|
'lxdm',
|
|
|
|
|
'mail',
|
|
|
|
|
'maildrop',
|
|
|
|
|
'mailman',
|
|
|
|
|
'man',
|
|
|
|
|
'mdom',
|
|
|
|
|
'memcached',
|
|
|
|
|
'messagebus',
|
2012-05-14 16:48:11 +02:00
|
|
|
'mktex',
|
2011-02-11 01:28:54 +01:00
|
|
|
'modem',
|
2011-08-05 10:47:05 +02:00
|
|
|
'mumble-server',
|
2015-06-24 10:27:08 +02:00
|
|
|
'mysql',
|
2011-02-11 01:28:54 +01:00
|
|
|
'nagcmd',
|
|
|
|
|
'nagios',
|
|
|
|
|
'named',
|
|
|
|
|
'news',
|
2011-08-05 10:47:05 +02:00
|
|
|
'nginx',
|
2011-02-11 01:28:54 +01:00
|
|
|
'nobody',
|
|
|
|
|
'nogroup',
|
|
|
|
|
'novell_nogroup',
|
|
|
|
|
'novlxtier',
|
|
|
|
|
'ntadmin',
|
2011-08-05 10:47:05 +02:00
|
|
|
'ntop',
|
2011-02-11 01:28:54 +01:00
|
|
|
'ntp',
|
|
|
|
|
'oinstall',
|
2014-04-25 10:01:56 +02:00
|
|
|
'ovirtagent',
|
2014-02-21 15:54:14 +01:00
|
|
|
'ceilometer',
|
|
|
|
|
'cinder',
|
|
|
|
|
'glance',
|
|
|
|
|
'heat',
|
|
|
|
|
'keystone',
|
|
|
|
|
'nova',
|
|
|
|
|
'neutron',
|
|
|
|
|
'swift',
|
|
|
|
|
'trove',
|
2011-02-11 01:28:54 +01:00
|
|
|
'otrs',
|
2015-02-11 14:02:28 +01:00
|
|
|
'pcp',
|
|
|
|
|
'pcpqa',
|
2011-02-11 01:28:54 +01:00
|
|
|
'pdns',
|
|
|
|
|
'pegasus',
|
|
|
|
|
'pkcs11',
|
2014-08-21 15:41:35 +02:00
|
|
|
'polipo',
|
2011-02-11 01:28:54 +01:00
|
|
|
'polkituser',
|
|
|
|
|
'postfix',
|
|
|
|
|
'postgres',
|
|
|
|
|
'pound',
|
|
|
|
|
'powersave',
|
|
|
|
|
'privoxy',
|
2016-06-19 23:17:26 +02:00
|
|
|
'prosody',
|
2011-02-11 01:28:54 +01:00
|
|
|
'public',
|
|
|
|
|
'pulse',
|
|
|
|
|
'pulse-access',
|
|
|
|
|
'pulse-rt',
|
2012-01-11 18:32:22 +01:00
|
|
|
'puppet',
|
2011-08-05 10:47:05 +02:00
|
|
|
'qemu',
|
2011-02-11 01:28:54 +01:00
|
|
|
'quagga',
|
2011-08-05 10:47:05 +02:00
|
|
|
'quasselcore',
|
2016-03-14 16:21:23 +01:00
|
|
|
'rabbitmq',
|
2011-02-11 01:28:54 +01:00
|
|
|
'radiusd',
|
2011-05-11 14:31:54 +02:00
|
|
|
'root',
|
2011-02-11 01:28:54 +01:00
|
|
|
'sabayon-admin',
|
2015-09-12 08:21:18 +02:00
|
|
|
'salt',
|
2011-02-11 01:28:54 +01:00
|
|
|
'sapdb',
|
2014-08-22 09:46:23 +02:00
|
|
|
'sddm',
|
2014-07-09 13:55:02 +02:00
|
|
|
'sensu',
|
2011-02-11 01:28:54 +01:00
|
|
|
'shadow',
|
2015-09-08 11:38:37 +02:00
|
|
|
'shibd',
|
2014-09-24 20:31:55 +02:00
|
|
|
'siproxd',
|
2016-09-07 09:03:58 +02:00
|
|
|
'sks',
|
2011-02-11 01:28:54 +01:00
|
|
|
'snort',
|
2014-03-31 10:48:42 +02:00
|
|
|
'squid',
|
2011-02-11 01:28:54 +01:00
|
|
|
'sshd',
|
|
|
|
|
'suse-ncc',
|
2013-05-21 11:12:06 +02:00
|
|
|
'svn',
|
2011-02-11 01:28:54 +01:00
|
|
|
'sys',
|
2014-07-21 14:25:16 +02:00
|
|
|
'systemd-journal',
|
|
|
|
|
'systemd-journal-gateway',
|
|
|
|
|
'tape',
|
2011-08-05 10:47:05 +02:00
|
|
|
'tftp',
|
2011-02-11 01:28:54 +01:00
|
|
|
'tomcat',
|
|
|
|
|
'tomcat4',
|
2011-12-19 14:42:14 +01:00
|
|
|
'tor',
|
2011-02-11 01:28:54 +01:00
|
|
|
'trusted',
|
2014-01-29 11:02:28 +01:00
|
|
|
'ts-shell',
|
2011-02-11 01:28:54 +01:00
|
|
|
'tss',
|
|
|
|
|
'tty',
|
2014-08-21 15:23:30 +02:00
|
|
|
'unbound',
|
2011-02-11 01:28:54 +01:00
|
|
|
'users',
|
|
|
|
|
'utmp',
|
|
|
|
|
'uucp',
|
|
|
|
|
'uuidd',
|
2011-08-30 08:37:35 +02:00
|
|
|
'vacation',
|
2011-08-05 10:47:05 +02:00
|
|
|
'varnish',
|
2011-02-11 01:28:54 +01:00
|
|
|
'video',
|
2015-07-10 12:28:04 +02:00
|
|
|
'vnc',
|
2011-02-11 01:28:54 +01:00
|
|
|
'vscan',
|
|
|
|
|
'wheel',
|
2015-12-11 11:27:58 +01:00
|
|
|
'wireshark',
|
2011-02-11 01:28:54 +01:00
|
|
|
'www',
|
|
|
|
|
'xok',
|
2011-08-05 10:47:05 +02:00
|
|
|
'zeroinst',
|
2012-01-27 02:00:27 +01:00
|
|
|
'znc',
|
2011-02-11 01:28:54 +01:00
|
|
|
'zope',
|
|
|
|
|
))
|
|
|
|
|
|
|
|
|
|
setOption('StandardUsers', (
|
|
|
|
|
'aegis',
|
|
|
|
|
'amanda',
|
2013-11-20 17:51:25 +01:00
|
|
|
'arangodb',
|
2011-02-11 01:28:54 +01:00
|
|
|
'asterisk',
|
|
|
|
|
'at',
|
|
|
|
|
'avahi',
|
|
|
|
|
'beagleindex',
|
|
|
|
|
'bigsister',
|
|
|
|
|
'bin',
|
|
|
|
|
'bitlbee',
|
2014-03-27 07:15:59 +01:00
|
|
|
'boinc',
|
2011-02-11 01:28:54 +01:00
|
|
|
'casaatsd',
|
|
|
|
|
'casaatvd',
|
|
|
|
|
'casaauth',
|
2015-04-24 10:19:24 +02:00
|
|
|
'ceph',
|
2013-06-24 12:26:05 +02:00
|
|
|
'chef',
|
2016-03-29 17:52:49 +02:00
|
|
|
'chrony',
|
2011-11-28 14:22:53 +01:00
|
|
|
'citadel',
|
2011-08-05 10:47:05 +02:00
|
|
|
'cntlm',
|
2012-11-29 13:04:56 +01:00
|
|
|
'colord',
|
2011-02-11 01:28:54 +01:00
|
|
|
'cop',
|
2014-10-28 11:18:55 +01:00
|
|
|
'crowbar',
|
2011-02-11 01:28:54 +01:00
|
|
|
'cyrus',
|
|
|
|
|
'daemon',
|
2014-12-01 16:51:28 +01:00
|
|
|
'davfs2',
|
2014-07-01 16:22:56 +02:00
|
|
|
'ddclient',
|
2011-02-11 01:28:54 +01:00
|
|
|
'dhcpd',
|
|
|
|
|
'distcc',
|
|
|
|
|
'dovecot',
|
|
|
|
|
'dpbox',
|
|
|
|
|
'dvbdaemon',
|
2013-10-24 11:01:39 +02:00
|
|
|
'elasticsearch',
|
2013-02-11 09:35:50 +01:00
|
|
|
'epmd',
|
2011-02-11 01:28:54 +01:00
|
|
|
'fax',
|
|
|
|
|
'festival',
|
|
|
|
|
'fetchmail',
|
|
|
|
|
'ffums',
|
2011-08-05 10:47:05 +02:00
|
|
|
'firebird',
|
2013-02-06 13:36:16 +01:00
|
|
|
'fonehome',
|
2011-02-11 01:28:54 +01:00
|
|
|
'ftp',
|
|
|
|
|
'games',
|
|
|
|
|
'gdm',
|
|
|
|
|
'geronimo',
|
|
|
|
|
'gnats',
|
|
|
|
|
'gnump3d',
|
|
|
|
|
'hacluster',
|
|
|
|
|
'haldaemon',
|
2011-08-05 10:47:05 +02:00
|
|
|
'hsqldb',
|
|
|
|
|
'icecast',
|
2011-02-11 01:28:54 +01:00
|
|
|
'icecream',
|
2012-08-06 13:24:01 +02:00
|
|
|
'icinga',
|
2011-02-11 01:28:54 +01:00
|
|
|
'intermezzo',
|
2014-08-27 13:54:55 +02:00
|
|
|
'iodined',
|
2011-02-11 01:28:54 +01:00
|
|
|
'irc',
|
|
|
|
|
'jabber',
|
|
|
|
|
'jboss',
|
2011-08-05 10:47:05 +02:00
|
|
|
'jetty5',
|
2011-08-12 17:57:51 +02:00
|
|
|
'jenkins',
|
2011-02-11 01:28:54 +01:00
|
|
|
'jonas',
|
2013-01-28 17:23:46 +01:00
|
|
|
'kolab',
|
|
|
|
|
'kolab-n',
|
|
|
|
|
'kolab-r',
|
2011-02-11 01:28:54 +01:00
|
|
|
'ldap',
|
2014-08-22 11:07:15 +02:00
|
|
|
'libstoragemgmt',
|
2011-08-01 09:22:53 +02:00
|
|
|
'lightdm',
|
2011-02-11 01:28:54 +01:00
|
|
|
'lighttpd',
|
|
|
|
|
'lp',
|
|
|
|
|
'lxdm',
|
|
|
|
|
'mail',
|
|
|
|
|
'mailman',
|
|
|
|
|
'man',
|
|
|
|
|
'mdnsd',
|
|
|
|
|
'mdom',
|
|
|
|
|
'memcached',
|
|
|
|
|
'messagebus',
|
2011-08-05 10:47:05 +02:00
|
|
|
'mumble-server',
|
2011-02-11 01:28:54 +01:00
|
|
|
'mysql',
|
|
|
|
|
'nagios',
|
|
|
|
|
'named',
|
|
|
|
|
'news',
|
2011-08-05 10:47:05 +02:00
|
|
|
'nginx',
|
2011-02-11 01:28:54 +01:00
|
|
|
'novell_nobody',
|
|
|
|
|
'novlifdr',
|
|
|
|
|
'novlxregd',
|
|
|
|
|
'novlxsrvd',
|
2011-08-05 10:47:05 +02:00
|
|
|
'ntop',
|
2011-02-11 01:28:54 +01:00
|
|
|
'ntp',
|
2012-11-27 17:00:34 +01:00
|
|
|
'openstack-ceilometer',
|
|
|
|
|
'openstack-cinder',
|
2012-06-20 10:48:40 +02:00
|
|
|
'openstack-glance',
|
2012-11-27 17:00:34 +01:00
|
|
|
'openstack-heat',
|
2012-06-20 10:48:40 +02:00
|
|
|
'openstack-keystone',
|
2012-11-27 17:00:34 +01:00
|
|
|
'openstack-nova',
|
2012-06-20 10:48:40 +02:00
|
|
|
'openstack-quantum',
|
|
|
|
|
'openstack-swift',
|
2011-02-11 01:28:54 +01:00
|
|
|
'oracle',
|
|
|
|
|
'otrs',
|
2014-04-25 10:01:56 +02:00
|
|
|
'ovirtagent',
|
2011-02-11 01:28:54 +01:00
|
|
|
'partimag',
|
2015-02-11 14:02:28 +01:00
|
|
|
'pcp',
|
|
|
|
|
'pcpqa',
|
2011-02-11 01:28:54 +01:00
|
|
|
'pdns',
|
|
|
|
|
'pegasus',
|
2014-08-21 15:41:35 +02:00
|
|
|
'polipo',
|
2011-02-11 01:28:54 +01:00
|
|
|
'polkituser',
|
|
|
|
|
'pop',
|
|
|
|
|
'postfix',
|
|
|
|
|
'postgres',
|
2011-08-05 10:47:05 +02:00
|
|
|
'postgrey',
|
2011-02-11 01:28:54 +01:00
|
|
|
'pound',
|
|
|
|
|
'privoxy',
|
2016-06-19 23:17:26 +02:00
|
|
|
'prosody',
|
2011-02-11 01:28:54 +01:00
|
|
|
'pulse',
|
2012-01-11 18:32:22 +01:00
|
|
|
'puppet',
|
2011-08-05 10:47:05 +02:00
|
|
|
'qemu',
|
2011-02-11 01:28:54 +01:00
|
|
|
'quagga',
|
2011-08-05 10:47:05 +02:00
|
|
|
'quasselcore',
|
2016-03-14 16:21:23 +01:00
|
|
|
'rabbitmq',
|
2011-02-11 01:28:54 +01:00
|
|
|
'radiusd',
|
2011-05-05 09:16:21 +02:00
|
|
|
'radvd',
|
2011-02-11 01:28:54 +01:00
|
|
|
'root',
|
|
|
|
|
'sabayon-admin',
|
2015-09-12 08:21:18 +02:00
|
|
|
'salt',
|
2011-02-11 01:28:54 +01:00
|
|
|
'sapdb',
|
2014-08-22 09:46:23 +02:00
|
|
|
'sddm',
|
2014-07-09 13:55:02 +02:00
|
|
|
'sensu',
|
2015-09-08 11:38:37 +02:00
|
|
|
'shibd',
|
2014-09-24 20:31:55 +02:00
|
|
|
'siproxd',
|
2016-09-07 09:03:58 +02:00
|
|
|
'sks',
|
2011-02-11 01:28:54 +01:00
|
|
|
'snort',
|
|
|
|
|
'squid',
|
|
|
|
|
'sshd',
|
2011-08-05 10:47:05 +02:00
|
|
|
'statd',
|
2011-02-11 01:28:54 +01:00
|
|
|
'suse-ncc',
|
2013-05-21 11:12:06 +02:00
|
|
|
'svn',
|
2014-07-21 14:25:16 +02:00
|
|
|
'systemd-journal-gateway'
|
2011-08-05 10:47:05 +02:00
|
|
|
'tftp',
|
2011-02-11 01:28:54 +01:00
|
|
|
'tomcat',
|
|
|
|
|
'tomcat4',
|
2011-12-19 14:42:14 +01:00
|
|
|
'tor',
|
2011-02-11 01:28:54 +01:00
|
|
|
'tss',
|
2011-08-05 10:47:05 +02:00
|
|
|
'ulogd',
|
2011-02-11 01:28:54 +01:00
|
|
|
'upsd',
|
2014-08-21 15:23:30 +02:00
|
|
|
'unbound',
|
2011-02-11 01:28:54 +01:00
|
|
|
'uucp',
|
|
|
|
|
'uuidd',
|
2011-08-30 08:37:35 +02:00
|
|
|
'vacation',
|
2011-08-05 10:47:05 +02:00
|
|
|
'varnish',
|
2011-02-11 01:28:54 +01:00
|
|
|
'vdr',
|
2015-07-10 12:28:04 +02:00
|
|
|
'vnc',
|
2011-02-11 01:28:54 +01:00
|
|
|
'vscan',
|
|
|
|
|
'wnn',
|
|
|
|
|
'wwwrun',
|
|
|
|
|
'yastws',
|
2011-08-05 10:47:05 +02:00
|
|
|
'zeroinst',
|
2012-01-27 02:00:27 +01:00
|
|
|
'znc',
|
2011-02-11 01:28:54 +01:00
|
|
|
'zope',
|
|
|
|
|
))
|
2008-04-21 18:36:30 +02:00
|
|
|
|
2011-04-21 12:12:02 +02:00
|
|
|
addDetails('non-standard-uid',
|
|
|
|
|
'''A file in this package is owned by an unregistered user id.
|
2011-11-28 14:22:53 +01:00
|
|
|
To register the user, please branch the devel:openSUSE:Factory:rpmlint rpmlint package,
|
|
|
|
|
add the user to the "config" file and send a submitrequest.
|
2011-04-21 12:12:02 +02:00
|
|
|
''',
|
|
|
|
|
'non-standard-gid',
|
|
|
|
|
'''A file in this package is owned by an unregistered group id.
|
2011-11-28 14:22:53 +01:00
|
|
|
To register the group, please branch the devel:openSUSE:Factory:rpmlint rpmlint package,
|
|
|
|
|
add the group to the "config" file and send a submitrequest.
|
2011-04-21 12:12:02 +02:00
|
|
|
'''
|
2015-04-10 16:35:46 +02:00
|
|
|
'no-changelogname-tag',
|
|
|
|
|
'''There is no changelog. Please insert a '%changelog' section heading in your
|
|
|
|
|
spec file and prepare your changes file using e.g. the 'osc vc' command.''',
|
2011-04-21 12:12:02 +02:00
|
|
|
)
|
|
|
|
|
|
2008-04-21 18:36:30 +02:00
|
|
|
setOption('DanglingSymlinkExceptions',
|
|
|
|
|
(['/usr/share/doc/licenses/', 'licenses'],
|
|
|
|
|
['consolehelper$', 'usermode-consoleonly'],
|
|
|
|
|
))
|
2008-04-17 04:52:37 +02:00
|
|
|
|
2010-10-20 15:23:06 +02:00
|
|
|
setOption("DBUSServices.WhiteList", (
|
|
|
|
|
"ConsoleKit.conf",
|
|
|
|
|
"hal.conf",
|
|
|
|
|
"cups.conf", # bnc#515977
|
|
|
|
|
"org.freedesktop.ConsoleKit.service",
|
|
|
|
|
"org.freedesktop.PolicyKit.conf",
|
|
|
|
|
"org.freedesktop.PolicyKit.service",
|
|
|
|
|
#
|
|
|
|
|
# the following are not audited. We accept them as legacy for now
|
|
|
|
|
#
|
|
|
|
|
# gnome-settings-daemon
|
|
|
|
|
"org.gnome.SettingsDaemon.DateTimeMechanism.service",
|
|
|
|
|
"org.gnome.SettingsDaemon.DateTimeMechanism.conf",
|
|
|
|
|
# upower
|
|
|
|
|
"org.freedesktop.UPower.service",
|
|
|
|
|
"org.freedesktop.UPower.conf",
|
|
|
|
|
# podsleuth
|
|
|
|
|
"podsleuth.conf",
|
|
|
|
|
# PackageKit
|
|
|
|
|
"org.freedesktop.PackageKit.conf",
|
|
|
|
|
# PackageKit
|
|
|
|
|
"org.freedesktop.PackageKit.service",
|
|
|
|
|
# NetworkManager-pptp
|
|
|
|
|
"nm-pptp-service.conf",
|
|
|
|
|
# gdm
|
|
|
|
|
"gdm.conf",
|
|
|
|
|
# udisks
|
|
|
|
|
"org.freedesktop.UDisks.service",
|
|
|
|
|
"org.freedesktop.UDisks.conf",
|
2012-02-29 14:51:55 +01:00
|
|
|
# udisks2 (bnc#742751)
|
|
|
|
|
"org.freedesktop.UDisks2.service",
|
|
|
|
|
"org.freedesktop.UDisks2.conf",
|
2010-10-20 15:23:06 +02:00
|
|
|
# scmon
|
|
|
|
|
"com.novell.Pkcs11Monitor.conf",
|
2011-05-05 09:16:21 +02:00
|
|
|
# systemd (bnc#641924)
|
2010-10-20 15:23:06 +02:00
|
|
|
"org.freedesktop.systemd1.service",
|
|
|
|
|
"org.freedesktop.systemd1.conf",
|
2011-05-05 09:16:21 +02:00
|
|
|
"org.freedesktop.hostname1.service",
|
|
|
|
|
"org.freedesktop.hostname1.conf",
|
2011-07-14 11:08:26 +02:00
|
|
|
"org.freedesktop.login1.conf",
|
|
|
|
|
"org.freedesktop.login1.service",
|
|
|
|
|
"org.freedesktop.timedate1.conf",
|
|
|
|
|
"org.freedesktop.timedate1.service",
|
|
|
|
|
"org.freedesktop.locale1.conf",
|
|
|
|
|
"org.freedesktop.locale1.service",
|
2010-10-20 15:23:06 +02:00
|
|
|
# gconf2
|
|
|
|
|
"org.gnome.GConf.Defaults.service",
|
|
|
|
|
"org.gnome.GConf.Defaults.conf",
|
2011-05-20 16:48:08 +02:00
|
|
|
# system-config-printer (bnc#694640)
|
|
|
|
|
"com.redhat.NewPrinterNotification.conf",
|
|
|
|
|
"com.redhat.PrinterDriversInstaller.conf",
|
2010-10-20 15:23:06 +02:00
|
|
|
# rtkit
|
|
|
|
|
"org.freedesktop.RealtimeKit1.conf",
|
|
|
|
|
"org.freedesktop.RealtimeKit1.service",
|
|
|
|
|
# wpa_supplicant
|
|
|
|
|
"fi.epitest.hostap.WPASupplicant.service",
|
2011-03-22 13:04:25 +01:00
|
|
|
# bnc#681116
|
|
|
|
|
"fi.w1.wpa_supplicant1.service",
|
2010-10-20 15:23:06 +02:00
|
|
|
"wpa_supplicant.conf",
|
|
|
|
|
# kdebase4-workspace
|
|
|
|
|
"org.kde.fontinst.service",
|
|
|
|
|
"org.kde.kcontrol.kcmkdm.conf",
|
|
|
|
|
"org.kde.fontinst.conf",
|
|
|
|
|
"org.kde.ksysguard.processlisthelper.service",
|
|
|
|
|
"org.kde.kcontrol.kcmclock.service",
|
|
|
|
|
"org.kde.kcontrol.kcmclock.conf",
|
|
|
|
|
"org.kde.kcontrol.kcmkdm.service",
|
|
|
|
|
"org.kde.ksysguard.processlisthelper.conf",
|
|
|
|
|
# pulseaudio
|
|
|
|
|
"pulseaudio-system.conf",
|
|
|
|
|
# kdebase4-runtime
|
|
|
|
|
"org.kde.kcontrol.kcmremotewidgets.service",
|
|
|
|
|
"org.kde.kcontrol.kcmremotewidgets.conf",
|
|
|
|
|
# k3b
|
|
|
|
|
"org.kde.kcontrol.k3bsetup.service",
|
|
|
|
|
"org.kde.kcontrol.k3bsetup.conf",
|
|
|
|
|
# NetworkManager-novellvpn
|
|
|
|
|
"nm-novellvpn-service.conf",
|
|
|
|
|
# avahi
|
|
|
|
|
"avahi-dbus.conf",
|
|
|
|
|
"org.freedesktop.Avahi.service",
|
|
|
|
|
# hp-drive-guard
|
|
|
|
|
"hp-drive-guard-dbus.conf",
|
|
|
|
|
# NetworkManager
|
|
|
|
|
"nm-dhcp-client.conf",
|
|
|
|
|
"nm-dispatcher.conf",
|
|
|
|
|
"nm-avahi-autoipd.conf",
|
|
|
|
|
"org.freedesktop.nm_dispatcher.service",
|
2012-02-20 09:35:30 +01:00
|
|
|
# bnc#747780
|
|
|
|
|
"org.freedesktop.NetworkManager.conf",
|
2010-10-20 15:23:06 +02:00
|
|
|
"NetworkManager-frontend.conf",
|
2011-03-22 13:04:25 +01:00
|
|
|
# bnc#681128
|
|
|
|
|
"org.freedesktop.NetworkManager.service",
|
2010-10-20 15:23:06 +02:00
|
|
|
# ModemManager
|
|
|
|
|
"org.freedesktop.ModemManager.service",
|
|
|
|
|
"org.freedesktop.ModemManager.conf",
|
|
|
|
|
# yast2-dbus-server
|
|
|
|
|
"org.opensuse.YaST.modules.service",
|
|
|
|
|
"org.opensuse.yast.SCR.conf",
|
|
|
|
|
"org.opensuse.YaST.modules.conf",
|
|
|
|
|
"org.opensuse.yast.SCR.service",
|
2011-02-11 01:28:54 +01:00
|
|
|
# webyast (bnc#660981)
|
|
|
|
|
"webyast.permissions.conf",
|
|
|
|
|
"webyast.permissions.service.service",
|
2012-06-21 08:56:33 +02:00
|
|
|
# bluez (bnc#768062)
|
2010-10-20 15:23:06 +02:00
|
|
|
"bluetooth.conf",
|
2012-06-21 08:56:33 +02:00
|
|
|
"org.bluez.service",
|
2010-10-20 15:23:06 +02:00
|
|
|
# dnsmasq
|
|
|
|
|
"dnsmasq.conf",
|
|
|
|
|
# backup-manager
|
|
|
|
|
"org.opensuse.BackupManager.service",
|
|
|
|
|
"backup-manager.conf",
|
|
|
|
|
# gypsy
|
|
|
|
|
"Gypsy.conf",
|
|
|
|
|
"org.freedesktop.Gypsy.service",
|
|
|
|
|
# pommed
|
|
|
|
|
"pommed.conf",
|
|
|
|
|
# NetworkManager-openvpn
|
|
|
|
|
"nm-openvpn-service.conf",
|
|
|
|
|
# kdelibs4
|
|
|
|
|
"org.kde.auth.conf",
|
|
|
|
|
# polkit
|
|
|
|
|
"org.freedesktop.PolicyKit1.conf",
|
|
|
|
|
"org.freedesktop.PolicyKit1.service",
|
|
|
|
|
# dconf
|
|
|
|
|
"ca.desrt.dconf.service",
|
|
|
|
|
# kerneloops
|
|
|
|
|
"kerneloops.dbus",
|
|
|
|
|
# polkit-kde-1
|
|
|
|
|
"org.kde.polkitkde1.helper.conf",
|
|
|
|
|
"org.kde.polkitkde1.helper.service",
|
|
|
|
|
# upstart
|
|
|
|
|
"Upstart.conf",
|
|
|
|
|
# cups-pk-helper
|
|
|
|
|
"org.opensuse.CupsPkHelper.Mechanism.service",
|
|
|
|
|
"org.opensuse.CupsPkHelper.Mechanism.conf",
|
|
|
|
|
# fwzs
|
|
|
|
|
"org.opensuse.zoneswitcher.service",
|
|
|
|
|
"org.opensuse.zoneswitcher.conf",
|
|
|
|
|
# yum
|
|
|
|
|
"yum-updatesd.conf",
|
|
|
|
|
# NetworkManager-vpnc
|
|
|
|
|
"nm-vpnc-service.conf",
|
2011-01-10 13:14:51 +01:00
|
|
|
# NetworkManager-strongswan, bnc#656222
|
|
|
|
|
"nm-strongswan-service.conf",
|
2011-01-14 14:41:13 +01:00
|
|
|
# mumble, bnc#660784
|
|
|
|
|
"mumble-server.conf",
|
2011-02-18 13:05:46 +01:00
|
|
|
# kdebase4-runtime, bnc#672145
|
|
|
|
|
"org.kde.powerdevil.backlighthelper.service",
|
|
|
|
|
"org.kde.powerdevil.backlighthelper.conf",
|
2011-04-21 12:12:02 +02:00
|
|
|
# urfkill (bnc#688328)
|
|
|
|
|
"org.freedesktop.URfkill.service",
|
|
|
|
|
"org.freedesktop.URfkill.conf",
|
2011-05-02 16:17:13 +02:00
|
|
|
# account services (bnc#676638)
|
|
|
|
|
"org.freedesktop.Accounts.service",
|
|
|
|
|
"org.freedesktop.Accounts.conf",
|
2011-05-20 16:48:08 +02:00
|
|
|
# synche-connector (bnc#683956)
|
|
|
|
|
"org.synce.dccm.service",
|
|
|
|
|
"org.synce.dccm.conf",
|
2011-06-07 17:14:42 +02:00
|
|
|
# colord (bnc#698250)
|
|
|
|
|
"org.freedesktop.ColorManager.service",
|
|
|
|
|
"org.freedesktop.ColorManager.conf",
|
2012-03-20 09:34:26 +01:00
|
|
|
# colord-sane (bnc#752518)
|
|
|
|
|
"org.freedesktop.colord-sane.service",
|
|
|
|
|
"org.freedesktop.colord-sane.conf",
|
2011-07-29 11:29:44 +02:00
|
|
|
# lightdm (bnc#708205)
|
|
|
|
|
"org.freedesktop.DisplayManager.conf",
|
2014-12-11 09:41:55 +01:00
|
|
|
# sddm (boo#897788)
|
|
|
|
|
"sddm_org.freedesktop.DisplayManager.conf",
|
2011-08-05 14:16:54 +02:00
|
|
|
# kdepim4/kalarm (bnc#707723)
|
|
|
|
|
"org.kde.kalarmrtcwake.conf",
|
|
|
|
|
"org.kde.kalarmrtcwake.service",
|
2011-11-28 12:01:56 +01:00
|
|
|
# NetworkManager-openvpn (bnc#732915)
|
|
|
|
|
"nm-openconnect-service.conf",
|
2012-02-29 14:51:55 +01:00
|
|
|
# smb4k (bnc#749065)
|
|
|
|
|
"de.berlios.smb4k.mounthelper.conf",
|
|
|
|
|
"de.berlios.smb4k.mounthelper.service",
|
2012-05-29 10:07:55 +02:00
|
|
|
# cdemu-deamon (bnc#764063)
|
|
|
|
|
"cdemud-dbus.conf",
|
2012-11-02 17:27:48 +01:00
|
|
|
# snapper (bnc#759391)
|
|
|
|
|
"org.opensuse.Snapper.conf",
|
|
|
|
|
"org.opensuse.Snapper.service",
|
2012-11-15 16:59:11 +01:00
|
|
|
# autofs-udisk interaction (bnc#782691)
|
|
|
|
|
"org.freedesktop.AutoMount.conf",
|
2013-02-19 15:26:13 +01:00
|
|
|
# NetworkManager-iodine (bnc#781071)
|
|
|
|
|
"nm-iodine-service.conf",
|
2013-04-15 18:01:48 +02:00
|
|
|
# new ModemManager (bnc#798273)
|
|
|
|
|
"org.freedesktop.ModemManager1.conf",
|
|
|
|
|
"org.freedesktop.ModemManager1.service",
|
2013-06-03 16:16:08 +02:00
|
|
|
# fprintd 0.4.1 (finger print dbus service) (bnc#792095)
|
2013-06-03 15:55:11 +02:00
|
|
|
"net.reactivated.Fprint.service",
|
|
|
|
|
"net.reactivated.Fprint.conf",
|
2013-06-12 10:28:01 +02:00
|
|
|
# lightdm-kde-greeter KCM shell dbus helper (bnc#794705)
|
|
|
|
|
"org.kde.kcontrol.kcmlightdm.conf",
|
|
|
|
|
"org.kde.kcontrol.kcmlightdm.service",
|
2013-07-04 09:23:27 +02:00
|
|
|
# nepomuk: org.kde.nepomuk.filewatch.service (bnc#825262)
|
|
|
|
|
# temporary approved only due to insufficient resources -Marcus
|
|
|
|
|
"org.kde.nepomuk.filewatch.service",
|
|
|
|
|
"org.kde.nepomuk.filewatch.conf",
|
2013-07-23 16:31:08 +02:00
|
|
|
# wicked network management (bnc#783932)
|
|
|
|
|
"network-nanny.conf",
|
|
|
|
|
"wicked-dhcp4.conf",
|
|
|
|
|
"wicked-dhcp6.conf",
|
|
|
|
|
"wicked-autoip4.conf",
|
|
|
|
|
"wicked.conf",
|
2013-09-25 13:15:02 +02:00
|
|
|
## next revision of names (old ones could go)
|
|
|
|
|
"org.opensuse.Network.conf",
|
|
|
|
|
"org.opensuse.Network.AUTO4.conf",
|
|
|
|
|
"org.opensuse.Network.DHCP6.conf",
|
|
|
|
|
"org.opensuse.Network.DHCP4.conf",
|
|
|
|
|
"org.opensuse.Network.Nanny.conf",
|
2013-07-29 14:31:49 +02:00
|
|
|
# systemd machined service (bnc#828207)
|
|
|
|
|
"org.freedesktop.machine1.service",
|
|
|
|
|
"org.freedesktop.machine1.conf",
|
2016-02-10 14:01:33 +01:00
|
|
|
# systemd importd service (bnc#964935)
|
|
|
|
|
"org.freedesktop.import1.service",
|
|
|
|
|
"org.freedesktop.import1.conf",
|
2013-09-11 15:09:31 +02:00
|
|
|
# GeoClue2 DBUS Service (bnc#838360)
|
|
|
|
|
"org.freedesktop.GeoClue2.service",
|
|
|
|
|
"org.freedesktop.GeoClue2.conf",
|
2014-03-18 09:42:06 +01:00
|
|
|
# GeoClue2 DBUS Service more (bnc#862216)
|
|
|
|
|
"org.freedesktop.GeoClue2.Agent.conf",
|
2013-09-17 15:42:42 +02:00
|
|
|
# mate dbus serice (bnc#831404)
|
|
|
|
|
"org.mate.SettingsDaemon.DateTimeMechanism.service",
|
|
|
|
|
"org.mate.SettingsDaemon.DateTimeMechanism.conf",
|
2013-10-15 10:25:37 +02:00
|
|
|
# tuned DBUS service (bnc#787379)
|
|
|
|
|
"com.redhat.tuned.conf",
|
2013-11-19 10:49:02 +01:00
|
|
|
"com.redhat.tuned.service",
|
|
|
|
|
# policycoreutils (bnc#848550)
|
|
|
|
|
"org.selinux.conf",
|
2013-11-20 09:45:28 +01:00
|
|
|
"org.selinux.service",
|
|
|
|
|
# bluez (bnc#768062)
|
|
|
|
|
"bluetooth.conf",
|
2013-11-20 09:59:44 +01:00
|
|
|
"org.bluez.service",
|
|
|
|
|
# kwallet (bnc#849739)
|
|
|
|
|
"org.kde.kcontrol.kcmkwallet.conf",
|
2013-11-27 09:00:34 +01:00
|
|
|
"org.kde.kcontrol.kcmkwallet.service",
|
|
|
|
|
# neard (bnc#837978)
|
|
|
|
|
"org.neard.conf",
|
2014-02-10 11:21:49 +01:00
|
|
|
"org.neard.service",
|
|
|
|
|
# networkmanager-openswan (bnc#808549)
|
2014-04-16 15:44:20 +02:00
|
|
|
"nm-openswan-service.conf",
|
|
|
|
|
# baloo, formerly nepomuk (bnc#866131)
|
2014-04-22 09:37:52 +02:00
|
|
|
"org.kde.baloo.filewatch.conf",
|
2014-05-19 16:08:21 +02:00
|
|
|
"org.kde.baloo.filewatch.service",
|
|
|
|
|
# policycoreutils new service/config (bnc#878631)
|
|
|
|
|
"org.selinux.service",
|
2014-06-11 12:40:37 +02:00
|
|
|
"org.selinux.conf",
|
|
|
|
|
# oFono (bnc#862354)
|
2014-07-17 18:13:00 +02:00
|
|
|
"ofono.conf",
|
|
|
|
|
# libKF5Auth4 (bnc#864716)
|
2014-12-10 15:06:29 +01:00
|
|
|
"org.kde.kf5auth.conf",
|
|
|
|
|
# firewalld (bnc#907625)
|
2015-04-22 14:23:20 +02:00
|
|
|
"FirewallD.conf",
|
2015-02-11 14:09:00 +01:00
|
|
|
# storaged (bnc#915769)
|
2015-04-22 14:23:20 +02:00
|
|
|
"com.redhat.storaged.conf",
|
|
|
|
|
"com.redhat.storaged.service",
|
2015-03-09 12:57:58 +01:00
|
|
|
# systemd networkd (bnc#918799)
|
2015-04-09 10:14:12 +02:00
|
|
|
"org.freedesktop.network1.conf",
|
2015-04-22 14:23:20 +02:00
|
|
|
"org.freedesktop.network1.service",
|
|
|
|
|
# realmd (bnc#916766)
|
|
|
|
|
"org.freedesktop.realmd.service",
|
2015-09-09 12:51:13 +02:00
|
|
|
"org.freedesktop.realmd.conf",
|
|
|
|
|
# teamd (bnc#941993)
|
|
|
|
|
"teamd@.service",
|
2015-11-09 13:48:47 +01:00
|
|
|
"org.libteam.teamd.conf",
|
|
|
|
|
# cinnamon settings daemon (bsc#951830)
|
|
|
|
|
"org.cinnamon.SettingsDaemon.DateTimeMechanism.conf",
|
2015-12-01 15:22:36 +01:00
|
|
|
"org.cinnamon.SettingsDaemon.DateTimeMechanism.service",
|
|
|
|
|
# thermald (bsc#954771)
|
|
|
|
|
"org.freedesktop.thermald.conf",
|
2016-01-13 16:09:37 +01:00
|
|
|
"org.freedesktop.thermald.service",
|
|
|
|
|
# drbdmanage (bsc#956811)
|
|
|
|
|
"org.drbd.drbdmanaged.conf",
|
2016-01-20 10:28:53 +01:00
|
|
|
"org.drbd.drbdmanaged.service",
|
|
|
|
|
# iio-sensor-proxy (bsc#939191)
|
|
|
|
|
"net.hadess.SensorProxy.conf",
|
2016-03-30 14:11:15 +02:00
|
|
|
"net.hadess.SensorProxy.service",
|
|
|
|
|
# openattic (bsc#972478)
|
|
|
|
|
"openattic.conf",
|
2016-05-19 14:00:27 +02:00
|
|
|
"openattic.service",
|
|
|
|
|
# TEMPORARY APPROVAL ONLY (meissner 20160519) tcmu-runner (bsc#978903)
|
|
|
|
|
"tcmu-runner.conf",
|
2016-09-14 14:09:34 +02:00
|
|
|
"org.kernel.TCMUService1.service",
|
|
|
|
|
# sysprof (bsc#996111)
|
|
|
|
|
"org.gnome.Sysprof2.service",
|
2016-10-11 13:16:35 +02:00
|
|
|
"org.gnome.Sysprof2.conf",
|
|
|
|
|
# flatpak (bsc#984817)
|
|
|
|
|
"org.freedesktop.Flatpak.SystemHelper.service",
|
|
|
|
|
"org.freedesktop.Flatpak.SystemHelper.conf"
|
2010-10-20 15:23:06 +02:00
|
|
|
))
|
|
|
|
|
|
2012-05-23 14:44:03 +02:00
|
|
|
setOption("PAMModules.WhiteList", (
|
|
|
|
|
# pam_p11
|
|
|
|
|
"pam_p11_opensc.so",
|
|
|
|
|
"pam_p11_openssh.so",
|
|
|
|
|
# pam_krb5
|
|
|
|
|
"pam_krb5.so",
|
|
|
|
|
"pam_krb5afs.so",
|
|
|
|
|
# ecryptfs-utils
|
|
|
|
|
"pam_ecryptfs.so",
|
|
|
|
|
# gnome-keyring-pam
|
|
|
|
|
"pam_gnome_keyring.so",
|
|
|
|
|
# pwdutils-rpasswd
|
|
|
|
|
"pam_rpasswd.so",
|
|
|
|
|
# samba-winbind
|
|
|
|
|
"pam_winbind.so",
|
|
|
|
|
# pam-modules
|
|
|
|
|
"pam_homecheck.so",
|
|
|
|
|
"pam_pwcheck.so",
|
|
|
|
|
"pam_unix2.so",
|
|
|
|
|
# pam_smb
|
|
|
|
|
"pam_smb_auth.so",
|
|
|
|
|
# ConsoleKit
|
|
|
|
|
"pam_ck_connector.so",
|
|
|
|
|
# pam_ssh
|
|
|
|
|
"pam_ssh.so",
|
|
|
|
|
# libcgroup1
|
|
|
|
|
"pam_cgroup.so",
|
|
|
|
|
# pam_fprint
|
|
|
|
|
"pam_fprint.so",
|
|
|
|
|
# pam_mount
|
|
|
|
|
"pam_mount.so",
|
|
|
|
|
# pam_ccreds
|
|
|
|
|
"pam_ccreds.so",
|
|
|
|
|
# pam_radius
|
|
|
|
|
"pam_radius_auth.so",
|
|
|
|
|
# pam_pkcs11
|
|
|
|
|
"pam_pkcs11.so",
|
|
|
|
|
# nss-pam-ldapd
|
|
|
|
|
"pam_ldap.so",
|
|
|
|
|
# pam_passwdqc
|
|
|
|
|
"pam_passwdqc.so",
|
|
|
|
|
# pam_userpass
|
|
|
|
|
"pam_userpass.so",
|
|
|
|
|
# pam_apparmor
|
|
|
|
|
"pam_apparmor.so",
|
|
|
|
|
# pam_ldap
|
|
|
|
|
"pam_ldap.so",
|
|
|
|
|
# cryptconfig
|
|
|
|
|
"pam_cryptpass.so",
|
|
|
|
|
# opie
|
|
|
|
|
"pam_opie.so",
|
|
|
|
|
# pam
|
|
|
|
|
"pam_access.so",
|
|
|
|
|
"pam_cracklib.so",
|
|
|
|
|
"pam_debug.so",
|
|
|
|
|
"pam_deny.so",
|
|
|
|
|
"pam_echo.so",
|
|
|
|
|
"pam_env.so",
|
|
|
|
|
"pam_exec.so",
|
|
|
|
|
"pam_faildelay.so",
|
|
|
|
|
"pam_filter.so",
|
|
|
|
|
"pam_ftp.so",
|
|
|
|
|
"pam_group.so",
|
|
|
|
|
"pam_issue.so",
|
|
|
|
|
"pam_keyinit.so",
|
|
|
|
|
"pam_lastlog.so",
|
|
|
|
|
"pam_limits.so",
|
|
|
|
|
"pam_listfile.so",
|
|
|
|
|
"pam_localuser.so",
|
|
|
|
|
"pam_loginuid.so",
|
|
|
|
|
"pam_mail.so",
|
|
|
|
|
"pam_mkhomedir.so",
|
|
|
|
|
"pam_motd.so",
|
|
|
|
|
"pam_namespace.so",
|
|
|
|
|
"pam_nologin.so",
|
|
|
|
|
"pam_permit.so",
|
|
|
|
|
"pam_pwhistory.so",
|
|
|
|
|
"pam_rhosts.so",
|
|
|
|
|
"pam_rootok.so",
|
|
|
|
|
"pam_securetty.so",
|
|
|
|
|
"pam_selinux.so",
|
|
|
|
|
"pam_sepermit.so",
|
|
|
|
|
"pam_shells.so",
|
|
|
|
|
"pam_stress.so",
|
|
|
|
|
"pam_succeed_if.so",
|
|
|
|
|
"pam_tally.so",
|
|
|
|
|
"pam_tally2.so",
|
|
|
|
|
"pam_time.so",
|
|
|
|
|
"pam_timestamp.so",
|
|
|
|
|
"pam_tty_audit.so",
|
|
|
|
|
"pam_umask.so",
|
|
|
|
|
"pam_unix.so",
|
|
|
|
|
"pam_unix_acct.so",
|
|
|
|
|
"pam_unix_auth.so",
|
|
|
|
|
"pam_unix_passwd.so",
|
|
|
|
|
"pam_unix_session.so",
|
|
|
|
|
"pam_userdb.so",
|
|
|
|
|
"pam_warn.so",
|
|
|
|
|
"pam_wheel.so",
|
|
|
|
|
"pam_xauth.so",
|
|
|
|
|
# systemd
|
|
|
|
|
"pam_systemd.so",
|
|
|
|
|
# sssd
|
|
|
|
|
"pam_sss.so",
|
|
|
|
|
# pam_mktemp
|
|
|
|
|
"pam_mktemp.so",
|
|
|
|
|
# pam_csync
|
|
|
|
|
"pam_csync.so",
|
|
|
|
|
# samba
|
|
|
|
|
"pam_smbpass.so",
|
|
|
|
|
# pam_chroot
|
|
|
|
|
"pam_chroot.so",
|
2013-07-31 16:00:39 +02:00
|
|
|
# pam_snapper (bnc#815383)
|
|
|
|
|
"pam_snapper.so",
|
2013-08-29 18:06:22 +02:00
|
|
|
# pam_mate_keyring.so (bnc#831404)
|
|
|
|
|
"pam_mate_keyring.so",
|
2016-10-26 11:33:37 +02:00
|
|
|
# pam_gdm (bsc#1004346)
|
|
|
|
|
"pam_gdm.so"
|
2012-05-23 14:44:03 +02:00
|
|
|
))
|
|
|
|
|
|
2008-04-17 04:52:37 +02:00
|
|
|
# Output filters
|
|
|
|
|
addFilter(".*spurious-bracket-in-.*")
|
|
|
|
|
addFilter(".*one-line-command-in-.*")
|
2011-04-21 12:12:02 +02:00
|
|
|
addFilter(" dir-or-file-in-opt ") # handled by CheckFilelist.py
|
|
|
|
|
addFilter(" dir-or-file-in-usr-local ") # handled by CheckFilelist.py
|
|
|
|
|
addFilter(" non-standard-dir-in-usr ") # handled by CheckFilelist.py
|
2008-04-17 04:52:37 +02:00
|
|
|
addFilter("incoherent-version-in-changelog")
|
|
|
|
|
addFilter(" no-signature")
|
2010-04-26 23:35:02 +02:00
|
|
|
addFilter(" symlink-crontab-file") #bnc591431
|
2008-04-17 04:52:37 +02:00
|
|
|
addFilter(" without-chkconfig")
|
|
|
|
|
addFilter("unstripped-binary-or-object.*\.ko")
|
|
|
|
|
addFilter(" no-chkconfig")
|
|
|
|
|
addFilter(" subsys-not-used")
|
|
|
|
|
addFilter(" dangerous-command.*")
|
|
|
|
|
addFilter(" setuid-binary.*")
|
|
|
|
|
addFilter(".*FSSTND-dir-in-var /var/adm/.*")
|
|
|
|
|
addFilter("subdir-in-bin /sbin/conf.d/")
|
|
|
|
|
addFilter(".* nss_db non-standard-dir-in-var db")
|
|
|
|
|
addFilter("non-standard-dir-in-usr openwin")
|
|
|
|
|
addFilter("ibcs2 non-standard-dir-in-usr i486-sysv4")
|
|
|
|
|
addFilter("shlibs5 non-standard-dir-in-usr i486-linux-libc5")
|
|
|
|
|
addFilter("explicit-lib-dependency libtool")
|
|
|
|
|
|
2014-05-06 10:05:28 +02:00
|
|
|
# filesystem package needs special exceptions
|
2014-05-06 11:45:15 +02:00
|
|
|
addFilter("^filesystem\..*: dir-or-file-in-var-run")
|
|
|
|
|
addFilter("^filesystem\..*: dir-or-file-in-var-lock")
|
|
|
|
|
addFilter("^filesystem\..*: dir-or-file-in-var-tmp")
|
|
|
|
|
addFilter("^filesystem\..*: dir-or-file-in-var-run")
|
|
|
|
|
addFilter("^filesystem\..*: dir-or-file-in-var-lock")
|
|
|
|
|
addFilter("^filesystem\..*: dir-or-file-in-usr-tmp")
|
|
|
|
|
addFilter("^filesystem\..*: dir-or-file-in-tmp")
|
|
|
|
|
addFilter("^filesystem\..*: dir-or-file-in-mnt")
|
|
|
|
|
addFilter("^filesystem\..*: dir-or-file-in-home")
|
2014-05-06 10:05:28 +02:00
|
|
|
addFilter("^filesystem\..*: hidden-file-or-dir /root/.gnupg")
|
|
|
|
|
addFilter("^filesystem\..*: hidden-file-or-dir /root/.gnupg")
|
|
|
|
|
addFilter("^filesystem\..*: hidden-file-or-dir /etc/skel/.config")
|
|
|
|
|
addFilter("^filesystem\..*: hidden-file-or-dir /etc/skel/.local")
|
|
|
|
|
addFilter("^filesystem\..*: hidden-file-or-dir /tmp/.X11-unix")
|
|
|
|
|
addFilter("^filesystem\..*: hidden-file-or-dir /tmp/.ICE-unix")
|
|
|
|
|
addFilter("^filesystem\..*: hidden-file-or-dir /etc/skel/.fonts")
|
|
|
|
|
addFilter("^filesystem\..*: suse-filelist-forbidden-fhs23")
|
|
|
|
|
addFilter("^filesystem\..*: suse-filelist-forbidden-opt")
|
|
|
|
|
addFilter("^filesystem\..*: non-standard-uid /var/lib/nobody nobody")
|
|
|
|
|
addFilter("^filesystem\..*: missing-dependency-to-cron")
|
|
|
|
|
# has arch specific dirs in /usr
|
|
|
|
|
addFilter("^filesystem\..*: no-binary")
|
2008-04-17 04:52:37 +02:00
|
|
|
|
|
|
|
|
# suppress any errors about internal packages
|
|
|
|
|
addFilter("^qa\S+: [EWI]:")
|
|
|
|
|
addFilter("^\S*(?:INTERNAL|internal)\.\S+: [EWI]:")
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# exceptions for devel-files
|
|
|
|
|
addFilter("devel-file-in-non-devel-package.*/boot/vmlinuz-.*autoconf.h")
|
|
|
|
|
addFilter("devel-file-in-non-devel-package.*/usr/src/linux-")
|
|
|
|
|
addFilter("devel-file-in-non-devel-package.*/usr/share/systemtap")
|
|
|
|
|
addFilter("kde4-kapptemplate\.\S+:.*devel-file-in-non-devel-package")
|
|
|
|
|
addFilter("kdesdk3\.\S+:.*devel-file-in-non-devel-package")
|
|
|
|
|
addFilter("-(?:examples|doc)\.\S+: \w: devel-file-in-non-devel-package")
|
|
|
|
|
addFilter("java\S+-demo\.\S+: \w: devel-file-in-non-devel-package")
|
|
|
|
|
addFilter('avr-libc\.\S+: \w: devel-file-in-non-devel-package')
|
|
|
|
|
addFilter('dietlibc\.\S+ \w: devel-file-in-non-devel-package')
|
|
|
|
|
addFilter('cross-.*devel-file-in-non-devel-package')
|
|
|
|
|
addFilter('cmake.*devel-file-in-non-devel-package')
|
|
|
|
|
addFilter('gcc\d\d.*devel-file-in-non-devel-package')
|
|
|
|
|
addFilter('OpenOffice_org-sdk\.\S+: \w: devel-file-in-non-devel-package')
|
|
|
|
|
addFilter('wnn-sdk\.\S+: \w: devel-file-in-non-devel-package')
|
|
|
|
|
addFilter('ocaml\.\S+: \w: devel-file-in-non-devel-package')
|
|
|
|
|
addFilter('xorg-x11-server-sdk\.\S+: \w: devel-file-in-non-devel-package')
|
|
|
|
|
addFilter('linux-kernel-headers\.\S+: \w: devel-file-in-non-devel-package')
|
|
|
|
|
addFilter(' devel-file-in-non-devel-package.*-config')
|
|
|
|
|
addFilter('libtool\.\S+: \w: devel-file-in-non-devel-package')
|
|
|
|
|
|
|
|
|
|
addFilter('update-desktop-files\.\S+: \w: untranslated-desktop-file')
|
|
|
|
|
addFilter("sdb.* dangling-relative-symlink /usr/share/doc/sdb/.*/gifs ../gifs")
|
|
|
|
|
addFilter("kernel-modules-not-in-kernel-packages")
|
2010-01-27 18:18:50 +01:00
|
|
|
# SUSE kmp's don't need manual depmod (bnc#456048)
|
|
|
|
|
addFilter("module-without-depmod-postin")
|
|
|
|
|
addFilter("postin-with-wrong-depmod")
|
|
|
|
|
addFilter("module-without-depmod-postun")
|
|
|
|
|
addFilter("postun-with-wrong-depmod")
|
|
|
|
|
#
|
2008-04-17 04:52:37 +02:00
|
|
|
addFilter("configure-without-libdir-spec")
|
|
|
|
|
addFilter("conffile-without-noreplace-flag /etc/init.d")
|
|
|
|
|
addFilter("use-of-RPM_SOURCE_DIR")
|
|
|
|
|
addFilter("use-tmp-in-")
|
|
|
|
|
addFilter("symlink-contains-up-and-down-segments /var/lib/named")
|
|
|
|
|
addFilter("no-ldconfig-symlink")
|
|
|
|
|
addFilter("aaa_base\.\S+: \w: use-of-home-in-%post")
|
|
|
|
|
addFilter("description-line-too-long")
|
|
|
|
|
addFilter("hardcoded-library-path")
|
|
|
|
|
# addFilter("incoherent-subsys")
|
|
|
|
|
# doesn't seem to make sense
|
|
|
|
|
addFilter("invalid-ldconfig-symlink")
|
|
|
|
|
addFilter("invalid-soname")
|
|
|
|
|
addFilter("library-not-linked-against-libc")
|
|
|
|
|
addFilter("only-non-binary-in-usr-lib")
|
|
|
|
|
addFilter("outside-libdir-files")
|
|
|
|
|
# we want these files
|
|
|
|
|
addFilter(" perl-temp-file ")
|
|
|
|
|
addFilter(" hidden-file-or-dir .*/\.packlist")
|
|
|
|
|
addFilter(" hidden-file-or-dir .*/\.directory")
|
|
|
|
|
addFilter("perl-.*no-binary")
|
|
|
|
|
addFilter(" no-major-in-name ")
|
|
|
|
|
# we check for that already
|
|
|
|
|
addFilter("dangling-relative-symlink")
|
|
|
|
|
addFilter(" lib-package-without-%mklibname")
|
|
|
|
|
addFilter(" requires-on-release")
|
|
|
|
|
addFilter(" non-executable-script /etc/profile.d/")
|
2008-04-21 18:36:30 +02:00
|
|
|
addFilter(" non-executable-script /var/adm/fillup-templates/")
|
2008-04-17 04:52:37 +02:00
|
|
|
addFilter(" init-script-name-with-dot ")
|
|
|
|
|
addFilter('.* statically-linked-binary /sbin/ldconfig')
|
|
|
|
|
addFilter('.* statically-linked-binary /sbin/init')
|
2008-05-01 14:19:31 +02:00
|
|
|
addFilter('valgrind.* statically-linked-binary')
|
2008-04-17 04:52:37 +02:00
|
|
|
addFilter('ldconfig-post.*/ddiwrapper/wine/')
|
|
|
|
|
addFilter('glibc\.\S+: \w: statically-linked-binary /usr/sbin/glibc_post_upgrade')
|
|
|
|
|
addFilter(" symlink-should-be-relative ")
|
|
|
|
|
addFilter(" binary-or-shlib-defines-rpath .*ORIGIN")
|
|
|
|
|
addFilter("libzypp.*shlib-policy-name-error.*libzypp")
|
2011-08-24 16:41:58 +02:00
|
|
|
addFilter("libtool.*shlib-policy.*")
|
2008-04-17 04:52:37 +02:00
|
|
|
|
|
|
|
|
# stuff that is currently too noisy, but might become relevant in the future
|
2010-04-05 18:53:54 +02:00
|
|
|
addFilter(" prereq-use")
|
2008-04-17 04:52:37 +02:00
|
|
|
addFilter(" file-not-utf8")
|
|
|
|
|
addFilter(" tag-not-utf8")
|
|
|
|
|
addFilter(" setup-not-quiet")
|
|
|
|
|
addFilter(" no-cleaning-of-buildroot ")
|
|
|
|
|
addFilter(" mixed-use-of-spaces-and-tabs ")
|
|
|
|
|
addFilter(" prereq-use ")
|
2008-07-25 04:49:34 +02:00
|
|
|
# an issue with OBS, works with autobuild
|
2008-08-06 01:56:12 +02:00
|
|
|
addFilter(" no-packager-tag")
|
2008-04-17 04:52:37 +02:00
|
|
|
addFilter(" unversioned-explicit-provides ")
|
|
|
|
|
addFilter(" unversioned-explicit-obsoletes ")
|
|
|
|
|
addFilter(" no-%clean-section")
|
|
|
|
|
addFilter(" service-default-enabled ")
|
|
|
|
|
addFilter(" non-standard-dir-perm ")
|
|
|
|
|
addFilter(" conffile-without-noreplace-flag ")
|
|
|
|
|
addFilter(" non-standard-executable-perm ")
|
|
|
|
|
addFilter(" jar-not-indexed ")
|
|
|
|
|
addFilter(" uncompressed-zip ")
|
|
|
|
|
addFilter(" %ifarch-applied-patch ")
|
|
|
|
|
addFilter(" read-error ")
|
|
|
|
|
addFilter(" init-script-without-chkconfig-postin ")
|
|
|
|
|
addFilter(" init-script-without-chkconfig-preun ")
|
|
|
|
|
addFilter(" postin-without-chkconfig ")
|
|
|
|
|
addFilter(" preun-without-chkconfig ")
|
|
|
|
|
addFilter(" no-dependency-on locales")
|
|
|
|
|
addFilter(" incoherent-version-in-name")
|
|
|
|
|
addFilter(" binary-or-shlib-defines-rpath")
|
|
|
|
|
addFilter(" executable-marked-as-config-file")
|
|
|
|
|
addFilter(" log-files-without-logrotate")
|
|
|
|
|
addFilter(" hardcoded-prefix-tag")
|
|
|
|
|
addFilter(" no-documentation")
|
|
|
|
|
addFilter(" multiple-specfiles")
|
|
|
|
|
addFilter(" apache2-naming-policy-not-applied")
|
|
|
|
|
addFilter(" no-default-runlevel ")
|
|
|
|
|
addFilter(" setgid-binary ")
|
|
|
|
|
addFilter(" non-readable ")
|
|
|
|
|
addFilter(" manpage-not-bzipped ")
|
|
|
|
|
addFilter(" postin-without-ghost-file-creation ")
|
|
|
|
|
# bug 287090
|
|
|
|
|
addFilter(" file-in-usr-marked-as-conffile")
|
|
|
|
|
addFilter(" non-remote_fs-dependency.*/boot")
|
|
|
|
|
|
|
|
|
|
# exceptions for non-devel-buildrequires
|
|
|
|
|
addFilter(" non-devel-buildrequires apache2-mod_perl")
|
|
|
|
|
addFilter(" non-devel-buildrequires ksh")
|
|
|
|
|
addFilter(" non-devel-buildrequires perl")
|
|
|
|
|
addFilter(" non-devel-buildrequires php5")
|
|
|
|
|
addFilter(" non-devel-buildrequires postfix")
|
|
|
|
|
addFilter(" non-devel-buildrequires python")
|
|
|
|
|
addFilter(" non-devel-buildrequires ruby")
|
|
|
|
|
addFilter(" non-devel-buildrequires valgrind")
|
|
|
|
|
addFilter(" non-devel-buildrequires yasm")
|
2008-04-21 18:36:30 +02:00
|
|
|
addFilter(" non-devel-buildrequires tcl")
|
2008-04-17 04:52:37 +02:00
|
|
|
|
|
|
|
|
addFilter("beagle-index\.\S+: \w: (non-devel|unnecessary)-buildrequires")
|
|
|
|
|
addFilter("collect-desktop-files\.\S+: \w: (non-devel|unnecessary)-buildrequires")
|
|
|
|
|
addFilter("installation-images\.\S+: \w: (non-devel|unnecessary)-buildrequires")
|
|
|
|
|
|
2009-02-09 10:44:19 +01:00
|
|
|
# exceptions for filelist checks
|
2009-02-09 17:58:47 +01:00
|
|
|
addFilter("nfs-client\.\S+: \w: suse-filelist-forbidden-backup-file /var/lib/nfs/sm.bak ")
|
2009-02-09 10:44:19 +01:00
|
|
|
addFilter("perl\.\S+: \w: suse-filelist-forbidden-perl-dir ")
|
2009-02-09 17:58:47 +01:00
|
|
|
addFilter("info\.\S+: \w: info-dir-file .*/usr/share/info/dir")
|
2009-01-30 16:19:08 +01:00
|
|
|
|
2011-11-28 12:01:56 +01:00
|
|
|
# fillup is known to break SuSEfirewall's sysconfig file on many
|
|
|
|
|
# systems as people tend to break up long lines into several ones.
|
|
|
|
|
# This bug remains unfixed since years (bnc#340926).
|
|
|
|
|
# So we have to avoid fillup and therefore break the SUSE policy
|
2011-11-28 13:35:27 +01:00
|
|
|
addFilter("SuSEfirewall2\.\S+: \w: suse-filelist-forbidden-sysconfig.*/etc/sysconfig/SuSEfirewall2")
|
2011-11-28 12:01:56 +01:00
|
|
|
|
2009-08-28 22:12:54 +02:00
|
|
|
# these packages are used for CD creation and are not supposed to be
|
|
|
|
|
# installed. It's still a dirty hack to make an exception. The
|
|
|
|
|
# packages should either be built in a separate project with
|
|
|
|
|
# different config or file be put somewhere below /opt/suse/*
|
|
|
|
|
addFilter("(?:dosutils|skelcd|installation-images|yast2-slide-show|instlux|skelcd-.*|patterns-.*)\.\S+: \w: suse-filelist-forbidden-fhs23 /CD1")
|
|
|
|
|
|
2008-04-17 04:52:37 +02:00
|
|
|
# suboptimal library packaging
|
|
|
|
|
addFilter(" non-devel-buildrequires graphviz")
|
|
|
|
|
addFilter(" non-devel-buildrequires ImageMagick")
|
|
|
|
|
addFilter(" non-devel-buildrequires aspell")
|
|
|
|
|
addFilter(" non-devel-buildrequires autotrace")
|
|
|
|
|
addFilter(" non-devel-buildrequires gettext")
|
|
|
|
|
addFilter(" non-devel-buildrequires devhelp")
|
|
|
|
|
addFilter(" non-devel-buildrequires libxml2")
|
|
|
|
|
addFilter(" non-devel-buildrequires libxslt")
|
|
|
|
|
addFilter(" non-devel-buildrequires recode")
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# many places have shorter paths
|
|
|
|
|
addFilter(" non-coherent-filename ")
|
|
|
|
|
|
|
|
|
|
# mandriva specific stuff that we don't want
|
|
|
|
|
addFilter(" invalid-build-requires ")
|
|
|
|
|
addFilter(" no-provides ")
|
|
|
|
|
|
2016-02-15 21:14:20 +01:00
|
|
|
# bash completion files are not scripts, do not require them marked as %config
|
|
|
|
|
addFilter("W: non-conffile-in-etc /etc/bash_completion.d/")
|
|
|
|
|
|
2008-04-17 04:52:37 +02:00
|
|
|
# config ends here
|
2008-04-21 18:36:30 +02:00
|
|
|
|
