From 12fabacd032f5c58bdfde8e46d2dbbbb8f694bf0 Mon Sep 17 00:00:00 2001 From: Debarshi Ray Date: Nov 09 2023 11:05:46 +0000 Subject: Silence 'rpminspect --tests=annocheck' and 'rpminspect --tests=runpath' The DT_RPATH or DT_RUNPATH value of /run/host%{_libdir} that's present in %{_bindir}/toolbox is intentional [1]. [1] Upstream commit 6063eb27b9893994 https://github.com/containers/toolbox/commit/6063eb27b9893994 https://github.com/containers/toolbox/issues/821 --- diff --git a/rpminspect.yaml b/rpminspect.yaml new file mode 100644 index 0000000..a0938f7 --- /dev/null +++ b/rpminspect.yaml @@ -0,0 +1,11 @@ +# https://github.com/rpminspect/rpminspect/blob/master/data/generic.yaml +# https://github.com/rpminspect/rpminspect-data-fedora/blob/main/fedora.yaml + +--- + +annocheck: + - hardened: --ignore-unknown --verbose --skip-run-path + +runpath: + allowed_paths: + - /run/host/usr/lib64