Update rpminspect.yaml config

Updated syntax to be compliant with latest rpminspect versions
Added badfunc exceptions per file
This commit is contained in:
Jesus Checa Hidalgo 2023-11-08 14:08:17 +01:00
parent db9a4bdb91
commit 6a6d525e8e
1 changed files with 17 additions and 19 deletions

View File

@ -1,21 +1,19 @@
--- ---
# For compiler-rt, we filter out the following forbidden functions from the list: badfuncs:
# For compiler-rt, we allow the following forbidden functions:
# - gethostbyname # - gethostbyname
# - gethostbyname2 # - gethostbyname2
# - gethostbyaddr # - gethostbyaddr
# - inet_aton # - inet_aton
# These are never actually used, and are installed just as interceptors. # These are never actually used, and are installed just as interceptors.
badfuncs: allowed:
- inet_addr /usr/lib*/clang/*/lib/*/libclang_rt.?san.so:
- inet_nsap_addr - gethostbyaddr
- inet_ntoa - gethostbyname
- inet_nsap_ntoa - gethostbyname2
- inet_makeaddr - inet_aton
- inet_netof /usr/lib*/clang/*/lib/*/libclang_rt.memprof.so:
- inet_network - gethostbyaddr
- inet_neta - gethostbyname
- inet_net_ntop - gethostbyname2
- inet_net_pton - inet_aton
- rcmd
- rexec
- rresvport