32 lines
1.9 KiB
Plaintext
32 lines
1.9 KiB
Plaintext
# Groups are no longer used for osfamily RedHat, but we provide those for osfamily SUSE
|
|
addFilter("W: non-standard-group .*")
|
|
# Subpackage is a common term for us
|
|
addFilter("W: spelling-error .* subpackage .*")
|
|
# Permissions for icinga
|
|
addFilter("W: non-standard-uid .* icinga")
|
|
addFilter("W: non-standard-gid .* icinga")
|
|
addFilter("W: non-standard-gid .* icingacmd")
|
|
# Configuration could possibly contain passwords
|
|
addFilter("E: non-readable /etc/icinga2/.*.conf (0)?640(L)?")
|
|
addFilter("E: non-readable /etc/icinga2/zones.d/README (0)?640(L)?")
|
|
# Because of permissions and configuration considerations all directories owned by icinga:icinga are made 750
|
|
addFilter("E: non-standard-dir-perm .* (0)?750(L)?")
|
|
addFilter("E: non-standard-dir-perm /run/icinga2/cmd (0)?2750(L)?")
|
|
# Because of permissions and configuration considerations all directories owned by icinga:icingacmd are made 770
|
|
addFilter("E: non-standard-dir-perm /var/spool/icinga2/perfdata (0)?770(L)?")
|
|
# Notification scripts should be changed by user
|
|
addFilter("E: executable-marked-as-config-file /etc/icinga2/scripts/.*")
|
|
# Project prefers usage of env over the path for supporting multiple distributions, no reason to change this in packaging
|
|
addFilter("E: wrong-script-interpreter /etc/icinga2/scripts/.* /usr/bin/env bash")
|
|
# Bash-completion should not be changed by user
|
|
addFilter("W: non-conffile-in-etc /etc/bash_completion.d/icinga2")
|
|
# While placing systemd droplet into /usr/lib/systemd would be better /etc/systemd is considered more understandable for users
|
|
addFilter("W: systemd-unit-in-etc /etc/systemd/system/icinga2.service.d.*")
|
|
# Logrotate configuration is placed in common instead of the main package because icinga2 is only a metapackage
|
|
addFilter("E: incoherent-logrotate-file /etc/logrotate.d/icinga2")
|
|
# Feature installation
|
|
addFilter("W: dangerous-command-in-%post ln")
|
|
addFilter("W: dangerous-command-in-%postun rm")
|
|
# Only scripts for initsystem in /usr/lib
|
|
addFilter("W: only-non-binary-in-usr-lib")
|