Update rpminspect.yaml config
Updated syntax to be compliant with latest rpminspect versions Added badfunc exceptions per file
This commit is contained in:
parent
db9a4bdb91
commit
6a6d525e8e
@ -1,21 +1,19 @@
|
||||
---
|
||||
# For compiler-rt, we filter out the following forbidden functions from the list:
|
||||
# - gethostbyname
|
||||
# - gethostbyname2
|
||||
# - gethostbyaddr
|
||||
# - inet_aton
|
||||
# These are never actually used, and are installed just as interceptors.
|
||||
badfuncs:
|
||||
- inet_addr
|
||||
- inet_nsap_addr
|
||||
- inet_ntoa
|
||||
- inet_nsap_ntoa
|
||||
- inet_makeaddr
|
||||
- inet_netof
|
||||
- inet_network
|
||||
- inet_neta
|
||||
- inet_net_ntop
|
||||
- inet_net_pton
|
||||
- rcmd
|
||||
- rexec
|
||||
- rresvport
|
||||
# For compiler-rt, we allow the following forbidden functions:
|
||||
# - gethostbyname
|
||||
# - gethostbyname2
|
||||
# - gethostbyaddr
|
||||
# - inet_aton
|
||||
# These are never actually used, and are installed just as interceptors.
|
||||
allowed:
|
||||
/usr/lib*/clang/*/lib/*/libclang_rt.?san.so:
|
||||
- gethostbyaddr
|
||||
- gethostbyname
|
||||
- gethostbyname2
|
||||
- inet_aton
|
||||
/usr/lib*/clang/*/lib/*/libclang_rt.memprof.so:
|
||||
- gethostbyaddr
|
||||
- gethostbyname
|
||||
- gethostbyname2
|
||||
- inet_aton
|
||||
|
Loading…
Reference in New Issue
Block a user