From c7f8c027aaf1b6a965d8498fe1897941ad31617a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20Men=C5=A1=C3=ADk?= Date: Wed, 20 Apr 2022 21:47:30 +0200 Subject: [PATCH] Add lint exceptions to avoid errors on updates Fixed something, others are just unimportant warnings. --- unbound.rpmlintrc | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 unbound.rpmlintrc diff --git a/unbound.rpmlintrc b/unbound.rpmlintrc new file mode 100644 index 0000000..05dce51 --- /dev/null +++ b/unbound.rpmlintrc @@ -0,0 +1,30 @@ +addFilter(r'crypto-policy-non-compliance-openssl') + +# Ignore generated certificates +addFilter(r'non-readable /etc/unbound/unbound_control.key') +addFilter(r'non-readable /etc/unbound/unbound_control.pem') +addFilter(r'non-readable /etc/unbound/unbound_server.key') +addFilter(r'non-readable /etc/unbound/unbound_server.pem') + +addFilter(r'non-standard-gid /etc/unbound/unbound_control.pem') +addFilter(r'non-standard-gid /etc/unbound/unbound_control.key') +addFilter(r'non-standard-gid /etc/unbound/unbound_server.pem') +addFilter(r'non-standard-gid /etc/unbound/unbound_server.key') + +# Yes, it is indeed certificate +addFilter(r'pem-certificate /etc/unbound/icannbundle.pem') + +# These files are intentionally replaceable. +addFilter(r'conffile-without-noreplace-flag /etc/unbound/icannbundle.pem') +addFilter(r'conffile-without-noreplace-flag /etc/unbound/root.key') +addFilter(r'conffile-without-noreplace-flag /var/lib/unbound/root.key') + +# ldconfig is no longer required +addFilter(r'post[iu]n-without-ldconfig /usr/lib64/libunbound.so') + +# Ignore unbound owned files +addFilter(r'non-standard-[ug]id (/var/lib|/etc|/run)/unbound') + +# Ignore spelling errors +addFilter(r'spelling-error %description -l en_US ep ') +addFilter(r'spelling-error %description -l en_US resolvers ')