Maintainer: Stanislav Ievlev
Information Packages Bugs and FR Repocop
Repocop messages:| package | status | test | message |
|---|---|---|---|
| alterator-firsttime-0.4-alt3.noarch |
 fail | init-lsb | /etc/rc.d/init.d/ahttpd-firsttime: not systemd compatible: lsb init header missing and ahttpd-firsttime.service is not present. See http://www.altlinux.org/Services_Policy for details. |
| avahi-sh-functions-0.1-alt3.noarch |
 info | missing-url | Missing Url: in a package. |
| build-environment-0.1-alt3.noarch |
info | missing-url | Missing Url: in a package. |
| cl-user-tools-0.1-alt8.noarch |
info | missing-url | Missing Url: in a package. |
| livecd-evms-0.2.6-alt1.noarch |
 warn | init-lsb | /etc/rc.d/init.d/livecd-evms: lsb init header missing. See http://www.altlinux.org/Services_Policy for details. |
| lz11-V2-1.2-alt1.qa2.x86_64 |
fail | unsafe-tmp-usage-in-scripts | The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /usr/bin/lz11.stopjobs: $ grep /tmp/ /usr/bin/lz11.stopjobs if [ "${pids}" ] ; then exit 0 fi echo "${pids}" > /tmp/lz11.terminate waitcounts=30 echo echo echo "removing all active printer jobs for " echo " etc usr with PIDS ${pids}" if [ ${nonefound} == 1 ] ; then i=${w... [the rest of the message is skipped] |
| m2300w-0.51-alt1.qa1.x86_64 |
fail | unsafe-tmp-usage-in-scripts | The test discovered scripts with errors which may be used by a user for damaging important system files. For example if a script uses in its work a temp file which is created in /tmp directory, then every user can create symlinks with the same name (pattern) in this directory in order to destroy or rewrite some system or another user's files. Scripts _must_ _use_ mktemp/tempfile or must use $TMPDIR. mktemp/tempfile is safest. $TMPDIR is safer than /tmp/ because libpam-tmpdir creates a subdirectory of /tmp that is only accessible by that user, and then sets TMPDIR and other variables to that. Hence, it doesn't matter nearly as much if you create a non-random filename, because nobody but you can access it. Found error in /usr/bin/m2300w-wrapper: $ grep /tmp/ /usr/bin/m2300w-wrapper # is heavy based on the Script from Rick's 'foo2zjs-wrapper' for the # Minolta Magiccolor 2300DL. # So i will leave his copyright on it. #********************************************************************* c... [the rest of the message is skipped] |
| mknfsroot-0.4-alt4.src |
warn | specfile-useradd-n | -n in useradd is compat option and can be removed any time. Use -N instead. |
| mknfsroot-0.4-alt4.noarch |
info | missing-url | Missing Url: in a package. |
| mpi-selector-1.0.3-alt4.noarch |
info | missing-url | Missing Url: in a package. |
| pbm2l7k-990321-alt1.qa2.x86_64 |
warn | rpm-filesystem-conflict-file-file | File /usr/bin/pbm2l7k conflicts with the package lexmark7000linux-990516-alt1.x86_64. Moreover, the packages have no explicit conflicts with each other. You should add explicit conflicts, or, if conflicts are avoidable, consider using alternatives. |
| printer-testpages-2.0-alt2.noarch |
info | missing-url | Missing Url: in a package. |
| sa-content-filter-0.1-alt3.qa1.src |
warn | specfile-useradd-n | -n in useradd is compat option and can be removed any time. Use -N instead. |
| sa-content-filter-0.1-alt3.qa1.noarch |
info | subdir-in-var-run | Found a subdir in /var/run or /var/lock. /var/run and /var/lock may be mounted as temporary filesystems, so the init.d scripts must handle this correctly. This will typically amount to creating any required subdirectories dynamically when the init.d script is run, rather than including them in the package and relying on rpm to create them. |
| sa-content-filter-0.1-alt3.qa1.noarch |
info | missing-url | Missing Url: in a package. |
| words-2-alt1.noarch |
info | missing-url | Missing Url: in a package. |
| xboard-4.9.1-alt2.x86_64 |
info | big-changelog | Package contains big ChangeLog. Gzip it. |