diff --git a/rpminspect.yaml b/rpminspect.yaml
index 331da0f..d01b3f9 100644
--- a/rpminspect.yaml
+++ b/rpminspect.yaml
@@ -3,9 +3,10 @@
 #
 # *** INTERNAL SETTINGS FOR RED HAT -- DO NOT REDISTRIBUTE ***
 #
-# In order to tweak the rpminspect configuration per component, the
-# default configuration file can be obtained from
-# https://gitlab.cee.redhat.com/osci/rpminspect-data-redhat/-/blob/master/redhat.yaml
+
+#XXX In order to tweak the rpminspect configuration per component, the
+#XXX default configuration file can be obtained from
+#XXX https://gitlab.cee.redhat.com/osci/rpminspect-data-redhat/-/blob/master/redhat.yaml
 
 ---
 badfuncs:
@@ -16,13 +17,17 @@ badfuncs:
     # only provide them to users for backwards compatibility.
 
     # This is an array of forbidden function names.
-    # Forbidden function symbol `inet_aton` is used in NetworkManager
-    # (Since 1.32.2 ).
-    # So drop these three function symbols from the list.
     - gethostbyname
     - gethostbyname2
     - gethostbyaddr
     - inet_addr
+
+    #XXX NetworkManager intentionally uses inet_aton. It does so in a controlled manner
+    #XXX to parse IPv4 addresses in the legacy style (with leading zeros, which inet_pton() does
+    #XXX not support). See https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/cf1b726157c36f72a79aa1276c8c80fe2be1d04d/src/libnm-glib-aux/nm-shared-utils.c#L911
+    #XXX
+    #XXX - inet_aton
+
     - inet_nsap_addr
     - inet_ntoa
     - inet_nsap_ntoa