# rpmlint filters for claude-desktop.
#
# This package repackages Anthropic's prebuilt, proprietary Electron .deb.
# The findings below are inherent to shipping that upstream binary as-is and
# cannot be fixed without rebuilding upstream (which we cannot). Each is
# deliberately allowed; anything NOT listed here (e.g. invalid-desktopfile)
# is intentionally left visible as a real signal.

# Upstream ships this helper as a prebuilt static binary; we cannot relink it.
addFilter("statically-linked-binary")

# The spec intentionally disables stripping (%%define __strip /bin/true) because
# these are prebuilt, upstream-signed blobs; stripping is neither wanted nor safe.
addFilter("unstripped-binary-or-object")

# Prebuilt upstream binary; we do not control its compiler/linker flags.
addFilter("position-independent-executable-suggested")

# Chromium sandbox / node-pty internals. The spec already drops the setuid bit
# on chrome-sandbox (namespace sandbox is used instead); the flag is about code
# inside the prebuilt binaries, which we cannot change.
addFilter("missing-call-to-setgroups-before-setuid")

# gethostbyname lives inside the bundled Chromium; not our code.
addFilter("binary-or-shlib-calls-gethostbyname")

# No testsuite exists for a prebuilt binary blob; an empty %%check is discouraged.
addFilter("no-%check-section")
