Each binary package has to include a plain file /usr/share/doc/*pkg*/copyright Please refer to Copyright information (Section 12.5) in the Debian Policy Manual for details. Visibility: error Show-Always: no Check: debian/copyright
The package installs an unstripped binary or object file. Please note, that shared libraries have to be stripped with the --strip-unneeded option. Please refer to Binaries (Section 10.1) in the Debian Policy Manual and Libraries (Section 10.2) in the Debian Policy Manual for details. Visibility: error Show-Always: no Check: binaries/debug-symbols
[usr/bin/cardpincheck]
The code in debian/rules requires a prerequisite that is not presently listed in the package's Build-Depends. In the special case of Python, affected packages should Build-Depend on one of python3, python3-all, python3-dev, or python3-all-dev. Which one depends on whether a package supports multiple Python versions, and also whether the package builds Python modules or uses Python only as part of the build process. Packages that depend on a specific Python version may build-depend on any appropriate pythonX.Y or pythonX.Y-dev package instead. The condition you see in the context is not a recommendation on what to add. If you see a list, more than likely only one member is needed to make this tag go away. You probably also do not need the :any multiarch qualifier, if you see one. Please refer to Package relationships (Section 4.2) in the Debian Policy Manual for details. Visibility: error Show-Always: no Check: debian/rules Renamed from: missing-build-dependency missing-python-build-dependency
This package provides an ELF executable that was not compiled as a position independent executable (PIE). In Debian, since version 6.2.0-7 of the gcc-6 package GCC will compile ELF binaries with PIE by default. In most cases a simple rebuild will be sufficient to remove this tag. PIE is required for fully enabling Address Space Layout Randomization (ASLR), which makes "Return-oriented" attacks more difficult. Historically, PIE has been associated with noticeable performance overhead on i386. However, GCC >= 5 has implemented an optimization that can reduce the overhead significantly. If you use dpkg-buildflags with hardening=+all,-pie in DEB_BUILD_MAINT_OPTIONS, remove the -pie. Please refer to https://wiki.debian.org/Hardening, https://gcc.gnu.org/gcc-5/changes.html, and https://software.intel.com/en-us/blogs/2014/12/26/new-optimizations-for-x86-in-upcoming-gcc-50-32bit-pic-mode for details. Visibility: warning Show-Always: no Check: binaries/hardening
[usr/bin/cardpincheck]
[usr/bin/cardpincheck]
[usr/bin/cryptosmartcard.sh]
The package declares a relationship with itself. This is not very useful except in the case of a package Conflicting with itself if its package name doubles as a virtual package. Visibility: warning Show-Always: no Check: fields/package-relations
The package "Description:" contains an unindented line which starts with a dash (-) or asterisk (*). If this was meant to be a list of items these lines need to be indented (dselect would word-wrap these lines otherwise). Please refer to Description (Section 5.6.13) in the Debian Policy Manual for details. Visibility: warning Show-Always: no Check: fields/description
Since Debian Policy version 4.0.1, the priority extra has been deprecated. Please update debian/control and replace all instances of Priority: extra with Priority: optional. Please refer to Priorities (Section 2.5) in the Debian Policy Manual for details. Visibility: warning Show-Always: no Check: fields/priority
When scripts are installed into a directory in the system PATH, the script name should not include an extension such as .sh or .pl that denotes the scripting language currently used to implement it. The implementation language may change; if it does, leaving the name the same would be confusing and changing it would be disruptive. Please refer to Scripts (Section 10.4) in the Debian Policy Manual for details. Visibility: warning Show-Always: no Check: files/scripts
[usr/bin/cryptosmartcard.sh]
The "Section:" field in this package's control file is not one of the sections in use on the ftp archive. Valid sections are currently admin, comm, cli-mono, database, debug, devel, doc, editors, electronics, embedded, fonts, games, gnome, gnu-r, gnustep, graphics, hamradio, haskell, httpd, interpreters, java, javascript, kde, libdevel, libs, lisp, localization, kernel, mail, math, misc, net, news, ocaml, oldlibs, otherosfs, perl, php, python, ruby, rust, science, shells, sound, tex, text, utils, vcs, video, web, x11, xfce, zope. The section name should be preceded by either "contrib/", "non-free/" or "non-free-firmware/" if the package is in the according archive area. Please refer to Sections (Section 2.4) in the Debian Policy Manual for details. Visibility: warning Show-Always: no Check: fields/section
The listed trigger is present in the control file of the package. The trigger is an await trigger, which may not be obvious from its name. The await triggers place rather strong requirements on dpkg that often lead to trigger cycles due to changes in other packages. If the package does not need the guarantees that dpkg provides to await triggers, please use the -noawait variant of the trigger. This is often the case for packages that use the trigger to compile a form of cache. If the package does need the guarantees provided by dpkg, then please document the rationale in a comment above the trigger and use the -await variant of the trigger to avoid this warning. Please refer to the deb-triggers(5) manual page and Bug#774559 for details. Visibility: warning Show-Always: no Check: triggers
[triggers:1]
[usr/bin/cryptosmartcard.sh:49]
[usr/bin/cryptosmartcard.sh:50]
[usr/share/initramfs-tools/hooks/cryptlukssc:43]
[usr/share/initramfs-tools/hooks/cryptlukssc:44]
[usr/bin/cryptosmartcard.sh:49]
[usr/bin/cryptosmartcard.sh:50]
[usr/share/initramfs-tools/hooks/cryptlukssc:43]
[usr/share/initramfs-tools/hooks/cryptlukssc:44]
[usr/bin/cryptosmartcard.sh:159]
[usr/bin/cryptosmartcard.sh:162]
[usr/bin/cryptosmartcard.sh:170]
[usr/bin/cryptosmartcard.sh:219]
This package provides an ELF binary that lacks the "bindnow" linker flag. This is needed (together with "relro") to make the "Global Offset Table" (GOT) fully read-only. The bindnow feature trades startup time for improved security. Please consider enabling this feature or consider overriding the tag (possibly with a comment about why). If you use dpkg-buildflags, you may have to add hardening=+bindnow or hardening=+all to DEB_BUILD_MAINT_OPTIONS. The relevant compiler flags are set in LDFLAGS. Please refer to https://wiki.debian.org/Hardening for details. Visibility: info Show-Always: no Check: binaries/hardening
[usr/bin/cardpincheck]
Lintian found a spelling error in the package description. Lintian has a list of common misspellings that it looks for. It does not have a dictionary like a spelling checker does. It is particularly picky about spelling and capitalization in package descriptions since they're very visible to end users. Visibility: info Show-Always: no Check: fields/description
This is the compressor format used for the control.tar tarball. Visibility: classification Show-Always: no Check: deb-format This tag is a classification. There is no issue in your package.
This is the compressor format used for the data.tar tarball. Visibility: classification Show-Always: no Check: deb-format This tag is a classification. There is no issue in your package.
The package does not rely on any maintainer scripts (or other executable control files). Visibility: classification Show-Always: no Check: control-files This tag is a classification. There is no issue in your package.
Lintian run for smartcardauth package.
|
Name
|
|
|
|---|---|---|
| Source package | smartcardauth_4:14.1.6~pre1-0raspbian12.0.0+1 |
|
| System tar | system.tar.xz |
|
| Package upload | smartcardauth_4:14.1.6~pre1-0raspbian12.0.0+1 |
|
|
Name
|
|
|
|---|---|---|
| Lintian report | lintian: smartcardauth | |
| Debug log | debusine:work-request-debug-logs |
Work requests that must be completed before this one can run.
| 180403 | 2 weeks, 1 day | Worker | sbuild: smartcardauth_4:14.1.6~pre1-0raspbian12.0.0+1 (armhf) | Completed | Success |
This work request is not required by any other one.
Internal collection: workflow-180384
backend: unshare build_architecture: armhf environment: debian/match:codename=raspbian-bookworm exclude_tags: [] fail_on_severity: error include_tags: [] input: binary_artifacts: - internal@collections/name:build-armhf source_artifact: 604811@artifacts output: binary_all_analysis: false source_analysis: false target_distribution: debian:raspbian-bookworm
backend: unshare build_architecture: armhf environment: debian/match:codename=raspbian-bookworm exclude_tags: [] fail_on_severity: error include_tags: [] input: binary_artifacts: - internal@collections/name:build-armhf source_artifact: 604811@artifacts output: binary_all_analysis: false source_analysis: false target_distribution: debian:raspbian-bookworm task_configuration: 1021
provided: - task:group:debusine::Admins - task:group:debusine::TDE-Owners - task:scope:debusine - task:source-package:smartcardauth - task:workspace:debusine:trinity-sb required: - worker:executor:unshare - worker:task:worker:lintian:version:1 - worker:type:external
configuration_context: bookworm environment_id: 27494 input_binary_artifacts_ids: - 636687 input_source_artifact_id: 604811 parameter_summary: smartcardauth_4:14.1.6~pre1-0raspbian12.0.0+1 runtime_context: binary-any:bookworm subject: smartcardauth
{ "step": "lintian-armhf", "display_name": "Lintian for armhf" }
{ "on_success": [ { "action": "update-collection-with-artifacts", "variables": null, "collection": "internal@collections", "name_template": "lintian-armhf", "artifact_filters": { "category": "debian:lintian" } } ] }
{ "runtime_statistics": { "memory": 335643648, "cpu_time": 1478, "duration": 401, "cpu_count": 32, "disk_space": 800215040, "available_memory": 67418435584, "available_disk_space": 33709219840 } }