https://bugzilla.novell.com/show_bug.cgi?id=471701 Summary: Deleting .svn directories with find triggers %install-no-mkdir-buildroot Classification: openSUSE Product: openSUSE.org Version: unspecified Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: BuildService AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: bitdealer@gmail.com QAContact: adrian@novell.com Found By: --- I'm deleting ".svn" directories from %{buildroot} with find %{buildroot}%{_datadir}/%{name} -name .svn -type d -depth -exec rm -rf {} \; but doing so generates the following warning: kde4-style-bespin.src: W: %install-no-mkdir-buildroot Your install section removes the buildroot but does not create them afterwards in a secure way, which allows attackers to trivially play tricks with symlinks on you. use mkdir %buildroot (no -p option!) or don't clean the buildroot in %install, because that's anyway already done for you by rpm. which is wrong in that case IMO. The package in question is kde4-style-bespin in KDE:KDE4:Community Url to package: https://build.opensuse.org/package/show?package=kde4-style-bespin&project=KDE%3AKDE4%3ACommunity -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.