From 6a6d525e8eecec60f8daeec09c55ed29b55dd955 Mon Sep 17 00:00:00 2001 From: Jesus Checa Hidalgo Date: Wed, 8 Nov 2023 14:08:17 +0100 Subject: [PATCH] Update rpminspect.yaml config Updated syntax to be compliant with latest rpminspect versions Added badfunc exceptions per file --- rpminspect.yaml | 36 +++++++++++++++++------------------- 1 file changed, 17 insertions(+), 19 deletions(-) diff --git a/rpminspect.yaml b/rpminspect.yaml index e3e96f2..41a17d6 100644 --- a/rpminspect.yaml +++ b/rpminspect.yaml @@ -1,21 +1,19 @@ --- -# For compiler-rt, we filter out the following forbidden functions from the list: -# - gethostbyname -# - gethostbyname2 -# - gethostbyaddr -# - inet_aton -# These are never actually used, and are installed just as interceptors. badfuncs: - - inet_addr - - inet_nsap_addr - - inet_ntoa - - inet_nsap_ntoa - - inet_makeaddr - - inet_netof - - inet_network - - inet_neta - - inet_net_ntop - - inet_net_pton - - rcmd - - rexec - - rresvport + # For compiler-rt, we allow the following forbidden functions: + # - gethostbyname + # - gethostbyname2 + # - gethostbyaddr + # - inet_aton + # These are never actually used, and are installed just as interceptors. + allowed: + /usr/lib*/clang/*/lib/*/libclang_rt.?san.so: + - gethostbyaddr + - gethostbyname + - gethostbyname2 + - inet_aton + /usr/lib*/clang/*/lib/*/libclang_rt.memprof.so: + - gethostbyaddr + - gethostbyname + - gethostbyname2 + - inet_aton