Update rpminspect.yaml config

Updated syntax to be compliant with latest rpminspect versions
Added badfunc exceptions per file
This commit is contained in:
Jesus Checa Hidalgo 2023-11-08 14:08:17 +01:00
parent db9a4bdb91
commit 6a6d525e8e
1 changed files with 17 additions and 19 deletions

View File

@ -1,21 +1,19 @@
---
# For compiler-rt, we filter out the following forbidden functions from the list:
# - gethostbyname
# - gethostbyname2
# - gethostbyaddr
# - inet_aton
# These are never actually used, and are installed just as interceptors.
badfuncs:
- inet_addr
- inet_nsap_addr
- inet_ntoa
- inet_nsap_ntoa
- inet_makeaddr
- inet_netof
- inet_network
- inet_neta
- inet_net_ntop
- inet_net_pton
- rcmd
- rexec
- rresvport
# For compiler-rt, we allow the following forbidden functions:
# - gethostbyname
# - gethostbyname2
# - gethostbyaddr
# - inet_aton
# These are never actually used, and are installed just as interceptors.
allowed:
/usr/lib*/clang/*/lib/*/libclang_rt.?san.so:
- gethostbyaddr
- gethostbyname
- gethostbyname2
- inet_aton
/usr/lib*/clang/*/lib/*/libclang_rt.memprof.so:
- gethostbyaddr
- gethostbyname
- gethostbyname2
- inet_aton