---
badfuncs:
  allowed:
    # mupdate uses gethostbyname (safely) to check if the IP address
    # of the given hostname is local.
    /usr/libexec/cyrus-imapd/mupdate:
      - gethostbyname
    # smmapd uses gethostbyname (safely) to verify user's host.
    /usr/libexec/cyrus-imapd/smmapd:
      - gethostbyname