This package provides an ELF executable that was not compiled as a position independent executable (PIE). In Debian, since version 6.2.0-7 of the gcc-6 package GCC will compile ELF binaries with PIE by default. In most cases a simple rebuild will be sufficient to remove this tag. PIE is required for fully enabling Address Space Layout Randomization (ASLR), which makes "Return-oriented" attacks more difficult. Historically, PIE has been associated with noticeable performance overhead on i386. However, GCC >= 5 has implemented an optimization that can reduce the overhead significantly. If you use dpkg-buildflags with hardening=+all,-pie in DEB_BUILD_MAINT_OPTIONS, remove the -pie. Refer to https://wiki.debian.org/Hardening, https://gcc.gnu.org/gcc-5/changes.html, and https://software.intel.com/en-us/blogs/2014/12/26/new-optimizations-for-x86-in-upcoming-gcc-50-32bit-pic-mode for details. Severity: warning Check: binaries
This package provides an ELF binary that lacks the "read-only relocation" link flag. This package was likely not built with the default Debian compiler flags defined by dpkg-buildflags. If built using dpkg-buildflags directly, be sure to import LDFLAGS. Refer to https://wiki.debian.org/Hardening for details. Severity: warning Check: binaries
A file is not valid UTF-8. Debian has used UTF-8 for many years. Support for national encodings is being phased out. This file probably appears to users in mangled characters (also called mojibake). Packaging control files must be encoded in valid UTF-8. Please convert the file to UTF-8 using iconv or a similar tool. Severity: warning Check: files/encoding Renamed from: national-encoding-in-text-file debian-changelog-file-uses-obsolete-national-encoding debian-control-file-uses-obsolete-national-encoding debian-copyright-file-uses-obsolete-national-encoding debian-news-file-uses-obsolete-national-encoding debian-tests-control-uses-national-encoding doc-base-file-uses-obsolete-national-encoding national-encoding-in-debconf-template national-encoding-in-manpage
The package declares a relationship with itself. This is not very useful except in the case of a package Conflicting with itself if its package name doubles as a virtual package. Severity: warning Check: fields/package-relations
The "Section:" field in this package's control file is not one of the sections in use on the ftp archive. Valid sections are currently admin, comm, cli-mono, database, debug, devel, doc, editors, electronics, embedded, fonts, games, gnome, gnu-r, gnustep, graphics, hamradio, haskell, httpd, interpreters, java, javascript, kde, libdevel, libs, lisp, localization, kernel, mail, math, misc, net, news, ocaml, oldlibs, otherosfs, perl, php, python, ruby, rust, science, shells, sound, tex, text, utils, vcs, video, web, x11, xfce, zope. The section name should be preceded by "non-free/" if the package is in the non-free archive area, and by "contrib/" if the package is in the contrib archive area. Refer to Debian Policy Manual section 2.4 (Sections) for details. Severity: warning Check: fields/section
This package provides an ELF binary that lacks the "bindnow" linker flag. This is needed (together with "relro") to make the "Global Offset Table" (GOT) fully read-only. The bindnow feature trades startup time for improved security. Please consider enabling this feature or consider overriding the tag (possibly with a comment about why). If you use dpkg-buildflags, you may have to add hardening=+bindnow or hardening=+all to DEB_BUILD_MAINT_OPTIONS. The relevant compiler flags are set in LDFLAGS. Refer to https://wiki.debian.org/Hardening for details. Severity: info Check: binaries
Lintian found a spelling error in the given binary. Lintian has a list of common misspellings that it looks for. It does not have a dictionary like a spelling checker does. If the string containing the spelling error is translated with the help of gettext or a similar tool, please fix the error in the translations as well as the English text to avoid making the translations fuzzy. With gettext, for example, this means you should also fix the spelling mistake in the corresponding msgids in the *.po files. You can often find the word in the source code by running: grep -rw <word> <source-tree> This tag may produce false positives for words that contain non-ASCII characters due to limitations in strings. Severity: info Check: binaries
The copyright file refers to the versionless symlink in /usr/share/common-licenses for the full text of the GPL, LGPL, or GFDL license. This symlink is updated to point to the latest version of the license when a new one is released. The package appears to allow relicensing under later versions of its license, so this is legally consistent, but it implies that Debian will relicense the package under later versions of those licenses as they're released. It is normally better to point to the version of the license the package references in its license statement. For example, if the package says something like "you may redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2, or (at your option) any later version", the debian/copyright file should refer to /usr/share/common-licenses/GPL-2, not /GPL. For packages released under the same terms as Perl, Perl references the GPL version 1, so point to /usr/share/common-licenses/GPL-1. Severity: pedantic Check: debian/copyright
[Trinity]
Lintian run for knowit-trinity package.
|
Name
|
|
|
|---|---|---|
| Source package | knowit-trinity_4:14.1.6~pre12-0raspbian11.0.0+0 |
|
| System tar | system.tar.xz |
|
| Package upload | knowit-trinity_4:14.1.6~pre12-0raspbian11.0.0+0 |
|
|
Name
|
|
|
|---|---|---|
| Lintian report | lintian: knowit-trinity, knowit-trinity-dbgsym | |
| Debug log | debusine:work-request-debug-logs |
Work requests that must be completed before this one can run.
| 171017 | 2 weeks, 2 days | Worker | sbuild: knowit-trinity_4:14.1.6~pre12-0raspbian11.0.0+0 (armhf) | Completed | Success |
This work request is not required by any other one.
Internal collection: workflow-170795
backend: unshare build_architecture: armhf environment: debian/match:codename=raspbian-bullseye exclude_tags: [] fail_on_severity: error include_tags: [] input: binary_artifacts: - internal@collections/name:build-armhf source_artifact: 603561@artifacts output: binary_all_analysis: false source_analysis: false target_distribution: debian:raspbian-bullseye
backend: unshare build_architecture: armhf environment: debian/match:codename=raspbian-bullseye exclude_tags: [] fail_on_severity: error include_tags: [] input: binary_artifacts: - internal@collections/name:build-armhf source_artifact: 603561@artifacts output: binary_all_analysis: false source_analysis: false target_distribution: debian:raspbian-bullseye task_configuration: 1021
provided: - task:group:debusine::Admins - task:group:debusine::TDE-Owners - task:scope:debusine - task:source-package:knowit-trinity - task:workspace:debusine:trinity-sb required: - worker:executor:unshare - worker:task:worker:lintian:version:1 - worker:type:external
configuration_context: bullseye environment_id: 27490 input_binary_artifacts_ids: - 611096 input_source_artifact_id: 603561 parameter_summary: knowit-trinity_4:14.1.6~pre12-0raspbian11.0.0+0 runtime_context: binary-any:bullseye subject: knowit-trinity
{ "step": "lintian-armhf", "display_name": "Lintian for armhf" }
{ "on_success": [ { "action": "update-collection-with-artifacts", "variables": null, "collection": "internal@collections", "name_template": "lintian-armhf", "artifact_filters": { "category": "debian:lintian" } } ] }
{ "runtime_statistics": { "memory": 289600512, "cpu_time": 455, "duration": 272, "cpu_count": 20, "disk_space": 716238848, "available_memory": 33649803264, "available_disk_space": 16824901632 } }