ZoneMinder uses the CakePHP project as the framework for ZoneMinder's API. We've also added the Crud project as a plugin to the CakePHP framework. Crud is configured as a git submodule in the ZoneMinder project. All of the issues you have mentioned are under the /usr/share/zoneminder/www/api folder and are either part of the CakePHP source code, or they are part of the Crud plugin found here /usr/share/zoneminder/www/api/app/Plugin/Crud/. > - 'htaccess-file' There are five .htaccess files in the zoneminder api/cakephp folder structure. I had previously considered migrating these to the central zoneminder apache config file, but the amount of work to benefit ratio seemed small. I'll look into it. > - wrong-script-interpreter I'll use find/sed to fix this from the specfile. > - non-executable-script (.php files) This is not causing the ZoneMinder API to malfunction, and I'm not even sure the files in question are even used. Perhaps I can just delete them. Will look into this. I wonder though, if I set the executable flag, will rpmlint then complain about executable scripts outside the bin folder? >- hidden-file-or-dir All but one of the hidden files are caused by multiple copes of the file .editorconfig. I'm already deleting several other hidden files from the specfile. I'll add .editorconfig to the list since it is not needed during runtime. One hidden file .semver contains the version of the Crud plugin. While deleting that file won't cause any runtime issues, it would be nice to keep it around for reference. >- W: pem-certificate If I move cacert.pem to /etc/pki/zoneminder/, can I then symlink it back to the spot CakePHP expects the file to be in? Do you know of any other packages which use CakePHP? It would be interesting to see exactly how other packages have managed through these rpmlint issues. I just hate reinventing the wheel.