diff --git a/rpminspect.yaml b/rpminspect.yaml
index e3e96f2..001774f 100644
--- a/rpminspect.yaml
+++ b/rpminspect.yaml
@@ -1,21 +1,19 @@
 ---
-# For compiler-rt, we filter out the following forbidden functions from the list:
-# - gethostbyname
-# - gethostbyname2
-# - gethostbyaddr
-# - inet_aton
-# These are never actually used, and are installed just as interceptors.
 badfuncs:
-    - inet_addr
-    - inet_nsap_addr
-    - inet_ntoa
-    - inet_nsap_ntoa
-    - inet_makeaddr
-    - inet_netof
-    - inet_network
-    - inet_neta
-    - inet_net_ntop
-    - inet_net_pton
-    - rcmd
-    - rexec
-    - rresvport
+    # For compiler-rt, we allow the following forbidden functions:
+    # - gethostbyname
+    # - gethostbyname2
+    # - gethostbyaddr
+    # - inet_aton
+    # These are never actually used, and are installed just as interceptors.
+    allowed:
+        /usr/lib*/clang/*/lib/libclang_rt.?san*so:
+            - gethostbyaddr
+            - gethostbyname
+            - gethostbyname2
+            - inet_aton
+        /usr/lib*/clang/*/lib/libclang_rt.memprof*so:
+            - gethostbyaddr
+            - gethostbyname
+            - gethostbyname2
+            - inet_aton