Update rpminspect.yaml config

Updated syntax to be compliant with latest rpminspect versions
Added badfunc exceptions per file
This commit is contained in:
Jesus Checa Hidalgo 2023-11-08 14:08:17 +01:00
parent db9a4bdb91
commit 6a6d525e8e
1 changed files with 17 additions and 19 deletions

View File

@ -1,21 +1,19 @@
--- ---
# For compiler-rt, we filter out the following forbidden functions from the list:
# - gethostbyname
# - gethostbyname2
# - gethostbyaddr
# - inet_aton
# These are never actually used, and are installed just as interceptors.
badfuncs: badfuncs:
- inet_addr # For compiler-rt, we allow the following forbidden functions:
- inet_nsap_addr # - gethostbyname
- inet_ntoa # - gethostbyname2
- inet_nsap_ntoa # - gethostbyaddr
- inet_makeaddr # - inet_aton
- inet_netof # These are never actually used, and are installed just as interceptors.
- inet_network allowed:
- inet_neta /usr/lib*/clang/*/lib/*/libclang_rt.?san.so:
- inet_net_ntop - gethostbyaddr
- inet_net_pton - gethostbyname
- rcmd - gethostbyname2
- rexec - inet_aton
- rresvport /usr/lib*/clang/*/lib/*/libclang_rt.memprof.so:
- gethostbyaddr
- gethostbyname
- gethostbyname2
- inet_aton