From e9a555ffbf0328c8e689b1ba26d122444f9f4d9f Mon Sep 17 00:00:00 2001 From: Jakub Jelen Date: Jun 26 2019 12:06:48 +0000 Subject: Whitelist some annonying errors from rpmlint --- diff --git a/openssh.rpmlintrc b/openssh.rpmlintrc new file mode 100644 index 0000000..0a7a50e --- /dev/null +++ b/openssh.rpmlintrc @@ -0,0 +1,21 @@ +# I do not know about any better place where to put profile files +addFilter(r'openssh-askpass.x86_64: W: non-conffile-in-etc /etc/profile.d/gnome-ssh-askpass.c?sh') + +# The ssh-keysign is not supposed to have standard permissions +addFilter(r'openssh.x86_64: E: non-standard-executable-perm /usr/libexec/openssh/ssh-keysign 2555') +addFilter(r'openssh.x86_64: E: setgid-binary /usr/libexec/openssh/ssh-keysign ssh_keys 2555') +addFilter(r'openssh.x86_64: W: non-standard-gid /usr/libexec/openssh/ssh-keysign ssh_keys') + +# The -cavs subpackage is internal without documentation +# The -askpass is not intended to be used directly so it is missing documentation +addFilter(r'openssh-(askpass|cavs).x86_64: W: no-documentation') + +# sshd config and sysconfig is not supposed to be world readable +addFilter(r'non-readable /etc/(ssh/sshd_config|sysconfig/sshd)') + +# The /var/empty/sshd is supposed to have the given permissions +addFilter(r'non-standard-dir-perm /var/empty/sshd 711') +addFilter(r'non-standard-dir-in-var empty') + +# Spelling false-positives +addFilter(r'spelling-error (Summary\(en_US\)|.* en_US) (mls|su|sudo|rlogin|rsh|untrusted) ')