# Groups are no longer used for osfamily RedHat, but we provide those for osfamily SUSE addFilter("W: non-standard-group .*") # Subpackage is a common term for us addFilter("W: spelling-error .* subpackage .*") # Permissions for icinga addFilter("W: non-standard-uid .* icinga") addFilter("W: non-standard-gid .* icinga") addFilter("W: non-standard-gid .* icingacmd") # Configuration could possibly contain passwords addFilter("E: non-readable /etc/icinga2/.*.conf (0)?640(L)?") addFilter("E: non-readable /etc/icinga2/zones.d/README (0)?640(L)?") # Because of permissions and configuration considerations all directories owned by icinga:icinga are made 750 addFilter("E: non-standard-dir-perm .* (0)?750(L)?") addFilter("E: non-standard-dir-perm /run/icinga2/cmd (0)?2750(L)?") # Because of permissions and configuration considerations all directories owned by icinga:icingacmd are made 770 addFilter("E: non-standard-dir-perm /var/spool/icinga2/perfdata (0)?770(L)?") # Notification scripts should be changed by user addFilter("E: executable-marked-as-config-file /etc/icinga2/scripts/.*") # Project prefers usage of env over the path for supporting multiple distributions, no reason to change this in packaging addFilter("E: wrong-script-interpreter /etc/icinga2/scripts/.* /usr/bin/env bash") # Bash-completion should not be changed by user addFilter("W: non-conffile-in-etc /etc/bash_completion.d/icinga2") # While placing systemd droplet into /usr/lib/systemd would be better /etc/systemd is considered more understandable for users addFilter("W: systemd-unit-in-etc /etc/systemd/system/icinga2.service.d.*") # Logrotate configuration is placed in common instead of the main package because icinga2 is only a metapackage addFilter("E: incoherent-logrotate-file /etc/logrotate.d/icinga2") # Feature installation addFilter("W: dangerous-command-in-%post ln") addFilter("W: dangerous-command-in-%postun rm") # Only scripts for initsystem in /usr/lib addFilter("W: only-non-binary-in-usr-lib")