From 8dd8dc8616a879c00237f1ebca7f3cbcce1fb772 Mon Sep 17 00:00:00 2001 From: "B. Watson" Date: Mon, 14 Sep 2026 23:50:52 -0400 Subject: sbopkglint: add checks for /var/log and /var/lib/pkgtools. --- sbopkglint.d/05-basic-sanity.t.sh | 3 +++ sbopkglint.d/pre-doinst.sh | 9 +++++++++ 2 files changed, 12 insertions(+) (limited to 'sbopkglint.d') diff --git a/sbopkglint.d/05-basic-sanity.t.sh b/sbopkglint.d/05-basic-sanity.t.sh index aa04cf9..79c75c7 100644 --- a/sbopkglint.d/05-basic-sanity.t.sh +++ b/sbopkglint.d/05-basic-sanity.t.sh @@ -220,5 +220,8 @@ for i in bin sbin usr/bin usr/sbin; do fi done +find_warnfiles "invalid file in /var/log (only 0-byte .new files allowed)" \ + var/log -type f -a \! \( -empty -a -name '*.new' \) + find_warnfiles "package contains files owned by UID/GID >= 1000" \ . \( -uid +999 -o -gid +999 \) diff --git a/sbopkglint.d/pre-doinst.sh b/sbopkglint.d/pre-doinst.sh index c374b8f..6499240 100644 --- a/sbopkglint.d/pre-doinst.sh +++ b/sbopkglint.d/pre-doinst.sh @@ -25,10 +25,19 @@ usr/lib64/perl5/perllocal.pod \ var/cache/fontconfig/CACHEDIR.TAG \ var/cache/man/usr-man/CACHEDIR.TAG" +baddirs="\ +var/lib/pkgtools/scripts +var/lib/pkgtools/douninst.sh +var/lib/pkgtools/packages" + for i in $badfiles; do [ -e "$i" ] && warn "package contains forbidden file: $i" done +for i in $baddirs; do + [ -e "$i" ] && warn "package contains forbidden directory: $i" +done + if [ -d usr/share/fonts ]; then find_warnfiles "package contains forbidden file(s):" \ usr/share/fonts -name 'fonts.*' -- cgit v1.2.3