Bug 1917948 - Review Request: iceauth - X11 Inter-Client Exchange authority file utility
Summary: Review Request: iceauth - X11 Inter-Client Exchange authority file utility
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Dave Cantrell
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-01-19 17:57 UTC by Adam Jackson
Modified: 2023-09-15 00:58 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2021-03-10 20:21:20 UTC
Type: ---
Embargoed:
dcantrell: fedora-review?


Attachments (Terms of Use)

Description Adam Jackson 2021-01-19 17:57:03 UTC
Spec URL: https://ajax.fedorapeople.org/deagg/server-utils/iceauth.spec
SRPM URL: https://ajax.fedorapeople.org/deagg/server-utils/iceauth-1.0.8-1.fc31.src.rpm
Description: iceauth is used to edit and display the authorization information used in connecting with the X11 Inter-Client Exchange protocol.
Fedora Account System Username: ajax

See also https://bugzilla.redhat.com/show_bug.cgi?id=1874138#c2

Comment 1 Dave Cantrell 2021-02-24 21:50:25 UTC
This is a review *template*. Besides handling the [ ]-marked tests you are
also supposed to fix the template before pasting into bugzilla:
- Add issues you find to the list of issues on top. If there isn't such
  a list, create one.
- Add your own remarks to the template checks.
- Add new lines marked [!] or [?] when you discover new things not
  listed by fedora-review.
- Change or remove any text in the template which is plain wrong. In this
  case you could also file a bug against fedora-review
- Remove the "[ ] Manual check required", you will not have any such lines
  in what you paste.
- Remove attachments which you deem not really useful (the rpmlint
  ones are mandatory, though)
- Remove this text



Package Review
==============

Legend:
[x] = Pass, [!] = Fail, [-] = Not applicable, [?] = Not evaluated
[ ] = Manual review needed



===== MUST items =====

C/C++:
[ ]: Provides: bundled(gnulib) in place as required.
     Note: Sources not installed
[ ]: Package does not contain kernel modules.
[ ]: Package contains no static executables.
[x]: If your application is a C or C++ application you must list a
     BuildRequires against gcc, gcc-c++ or clang.
[x]: Header files in -devel subpackage, if present.
[x]: Package does not contain any libtool archives (.la)
[x]: Rpath absent or only used for internal libs.

Generic:
[ ]: Package is licensed with an open-source compatible license and meets
     other legal requirements as defined in the legal section of Packaging
     Guidelines.
[ ]: If (and only if) the source package includes the text of the
     license(s) in its own file, then that file, containing the text of the
     license(s) for the package is included in %license.
[ ]: License field in the package spec file matches the actual license.
     Note: There is no build directory. Running licensecheck on vanilla
     upstream sources. No licenses found. Please check the source files for
     licenses manually.
[ ]: License file installed when any subpackage combination is installed.
[ ]: %build honors applicable compiler flags or justifies otherwise.
[ ]: Package contains no bundled libraries without FPC exception.
[ ]: Changelog in prescribed format.
[ ]: Sources contain only permissible code or content.
[ ]: Package contains desktop file if it is a GUI application.
[ ]: Development files must be in a -devel package
[ ]: Package uses nothing in %doc for runtime.
[ ]: Package consistently uses macros (instead of hard-coded directory
     names).
[ ]: Package is named according to the Package Naming Guidelines.
[ ]: Package does not generate any conflict.
[ ]: Package obeys FHS, except libexecdir and /usr/target.
[ ]: If the package is a rename of another package, proper Obsoletes and
     Provides are present.
[ ]: Requires correct, justified where necessary.
[ ]: Spec file is legible and written in American English.
[ ]: Package contains systemd file(s) if in need.
[ ]: Useful -debuginfo package or justification otherwise.
[ ]: Package is not known to require an ExcludeArch tag.
[ ]: Package complies to the Packaging Guidelines
[x]: Package successfully compiles and builds into binary rpms on at least
     one supported primary architecture.
[x]: Package installs properly.
[x]: Rpmlint is run on all rpms the build produces.
     Note: No rpmlint messages.
[x]: Package requires other packages for directories it uses.
[x]: Package must own all directories that it creates.
[x]: Package does not own files or directories owned by other packages.
[x]: Package uses either %{buildroot} or $RPM_BUILD_ROOT
[x]: Package does not run rm -rf %{buildroot} (or $RPM_BUILD_ROOT) at the
     beginning of %install.
[x]: Macros in Summary, %description expandable at SRPM build time.
[x]: Dist tag is present.
[x]: Package does not contain duplicates in %files.
[x]: Permissions on files are set properly.
[x]: Package must not depend on deprecated() packages.
[x]: Package use %makeinstall only when make install DESTDIR=... doesn't
     work.
[x]: Package is named using only allowed ASCII characters.
[x]: Package does not use a name that already exists.
[x]: Package is not relocatable.
[x]: Sources used to build the package match the upstream source, as
     provided in the spec URL.
[x]: Spec file name must match the spec package %{name}, in the format
     %{name}.spec.
[x]: File names are valid UTF-8.
[x]: Large documentation must go in a -doc subpackage. Large could be size
     (~1MB) or number of files.
     Note: Documentation size is 0 bytes in 0 files.
[x]: Packages must not store files under /srv, /opt or /usr/local

===== SHOULD items =====

Generic:
[ ]: If the source package does not include license text(s) as a separate
     file from upstream, the packager SHOULD query upstream to include it.
[ ]: Final provides and requires are sane (see attachments).
[ ]: Package functions as described.
[ ]: Latest version is packaged.
[ ]: Package does not include license text files separate from upstream.
[ ]: Sources are verified with gpgverify first in %prep if upstream
     publishes signatures.
     Note: gpgverify is not used.
[ ]: Description and summary sections in the package spec file contains
     translations for supported Non-English languages, if available.
[ ]: Package should compile and build into binary rpms on all supported
     architectures.
[ ]: %check is present and all tests pass.
[ ]: Packages should try to preserve timestamps of original installed
     files.
[x]: Reviewer should test that the package builds in mock.
[x]: Buildroot is not present
[x]: Package has no %clean section with rm -rf %{buildroot} (or
     $RPM_BUILD_ROOT)
[x]: No file requires outside of /etc, /bin, /sbin, /usr/bin, /usr/sbin.
[x]: Fully versioned dependency in subpackages if applicable.
[x]: Packager, Vendor, PreReq, Copyright tags should not be in spec file
[x]: Sources can be downloaded from URI in Source: tag
[x]: SourceX is a working URL.
[x]: Spec use %global instead of %define unless justified.

===== EXTRA items =====

Generic:
[x]: Rpmlint is run on debuginfo package(s).
     Note: No rpmlint messages.
[x]: Rpmlint is run on all installed packages.
     Note: No rpmlint messages.
[x]: Large data in /usr/share should live in a noarch subpackage if package
     is arched.


Rpmlint
-------
Checking: iceauth-1.0.8-1.fc35.x86_64.rpm
          iceauth-debuginfo-1.0.8-1.fc35.x86_64.rpm
          iceauth-debugsource-1.0.8-1.fc35.x86_64.rpm
          iceauth-1.0.8-1.fc35.src.rpm
4 packages and 0 specfiles checked; 0 errors, 0 warnings.




Rpmlint (debuginfo)
-------------------
Checking: iceauth-debuginfo-1.0.8-1.fc35.x86_64.rpm
1 packages and 0 specfiles checked; 0 errors, 0 warnings.





Rpmlint (installed packages)
----------------------------
3 packages and 0 specfiles checked; 0 errors, 0 warnings.



Source checksums
----------------
https://www.x.org/pub/individual/app/iceauth-1.0.8.tar.bz2 :
  CHECKSUM(SHA256) this package     : e6ee213a217265cc76050e4293ea70b98c32dce6505c6421227efbda62ab60c6
  CHECKSUM(SHA256) upstream package : e6ee213a217265cc76050e4293ea70b98c32dce6505c6421227efbda62ab60c6


Requires
--------
iceauth (rpmlib, GLIBC filtered):
    libICE.so.6()(64bit)
    libc.so.6()(64bit)
    rtld(GNU_HASH)

iceauth-debuginfo (rpmlib, GLIBC filtered):

iceauth-debugsource (rpmlib, GLIBC filtered):



Provides
--------
iceauth:
    iceauth
    iceauth(x86-64)

iceauth-debuginfo:
    debuginfo(build-id)
    iceauth-debuginfo
    iceauth-debuginfo(x86-64)

iceauth-debugsource:
    iceauth-debugsource
    iceauth-debugsource(x86-64)



Generated by fedora-review 0.7.6 (b083f91) last change: 2020-11-10
Command line :/usr/bin/fedora-review -rn iceauth-1.0.8-1.fc31.src.rpm
Buildroot used: fedora-rawhide-x86_64
Active plugins: C/C++, Generic, Shell-api
Disabled plugins: R, fonts, Java, PHP, Perl, Python, Ocaml, Haskell, SugarActivity
Disabled flags: EPEL6, EPEL7, DISTTAG, BATCH, EXARCH

Comment 2 Dave Cantrell 2021-02-24 22:06:48 UTC
(In reply to David Cantrell from comment #1)
> [ ]: Provides: bundled(gnulib) in place as required.
>      Note: Sources not installed

It does not.

> [ ]: Package does not contain kernel modules.

Not even Mr. Redenbacher could find one.

> [ ]: Package contains no static executables.

That is a correct and true statement.

> [ ]: Package is licensed with an open-source compatible license and meets
>      other legal requirements as defined in the legal section of Packaging
>      Guidelines.

It is.  MIT.

> [ ]: If (and only if) the source package includes the text of the
>      license(s) in its own file, then that file, containing the text of the
>      license(s) for the package is included in %license.

FAIL.  Package needs:

%license COPYING

> [ ]: License field in the package spec file matches the actual license.
>      Note: There is no build directory. Running licensecheck on vanilla
>      upstream sources. No licenses found. Please check the source files for
>      licenses manually.

It does.

> [ ]: License file installed when any subpackage combination is installed.

FAIL.  Package lacks "%license COPYING"

> [ ]: %build honors applicable compiler flags or justifies otherwise.

It does.

> [ ]: Package contains no bundled libraries without FPC exception.

Correct.

> [ ]: Changelog in prescribed format.

Very much so.

> [ ]: Sources contain only permissible code or content.

Only the most permissible.

> [ ]: Package contains desktop file if it is a GUI application.

N/A

> [ ]: Development files must be in a -devel package

N/A

> [ ]: Package uses nothing in %doc for runtime.

Correct.

> [ ]: Package consistently uses macros (instead of hard-coded directory
>      names).

Yes.

> [ ]: Package is named according to the Package Naming Guidelines.

Yes.

> [ ]: Package does not generate any conflict.

This is subjective, right?  Unfortunately it carries the name "iceauth" and one not familiar with this software might think it's related to Immigration and Customs Enforcement in which case the executable name "iceauth" is even more of a bold statement.  However, it being part of Xorg I think it's clear that it is part of the Inter-Client Exchange.

I am going to say that it does not generate conflict though the name could, in theory, be pointed to as problem language.

> [ ]: Package obeys FHS, except libexecdir and /usr/target.

It does.

> [ ]: If the package is a rename of another package, proper Obsoletes and
>      Provides are present.

N/A

> [ ]: Requires correct, justified where necessary.

Yes.

> [ ]: Spec file is legible and written in American English.

You bet!

> [ ]: Package contains systemd file(s) if in need.

N/A

> [ ]: Useful -debuginfo package or justification otherwise.

Sure.

> [ ]: Package is not known to require an ExcludeArch tag.

I know it's not required and know the package does not carry the unknown tag.

> [ ]: Package complies to the Packaging Guidelines

Yep.

> ===== SHOULD items =====
> 
> Generic:
> [ ]: If the source package does not include license text(s) as a separate
>      file from upstream, the packager SHOULD query upstream to include it.

License is there, the package needs the %license directive.

> [ ]: Final provides and requires are sane (see attachments).

They are.

> [ ]: Package functions as described.

Yes.

> [ ]: Latest version is packaged.

I assume so.

> [ ]: Package does not include license text files separate from upstream.

Correct.

> [ ]: Sources are verified with gpgverify first in %prep if upstream
>      publishes signatures.
>      Note: gpgverify is not used.

N/A

> [ ]: Description and summary sections in the package spec file contains
>      translations for supported Non-English languages, if available.

N/A

> [ ]: Package should compile and build into binary rpms on all supported
>      architectures.

It does.

> [ ]: %check is present and all tests pass.

N/A

> [ ]: Packages should try to preserve timestamps of original installed
>      files.

Sure.

> [x]: Reviewer should test that the package builds in mock.

Done.


Other notes:
------------

1) There's an empty %doc directive.  Shouldn't that be "%doc ChangeLog INSTALL README" or something along those lines?

2) There is no %license line for COPYING (noted above).

3) Are the BuildRequires wrapped in "%if 0/%endif" required for anything?  Can they be removed?

Comment 3 Adam Jackson 2021-03-10 20:21:20 UTC
Built in F34.

Comment 4 Red Hat Bugzilla 2023-09-15 00:58:35 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 500 days


Note You need to log in before you can comment on or make changes to this bug.