From c72dda3ac87aa7c114cf7675d440dab288295062 Mon Sep 17 00:00:00 2001
From: DJ Delorie <dj@redhat.com>
Date: Thu, 21 Aug 2025 14:13:20 -0400
Subject: [PATCH] Add rpminspect.yaml with expected failures (RHEL-86590)

Resolves: RHEL-86590
---
 rpminspect.yaml | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 rpminspect.yaml

diff --git a/rpminspect.yaml b/rpminspect.yaml
new file mode 100644
index 0000000..3829b88
--- /dev/null
+++ b/rpminspect.yaml
@@ -0,0 +1,34 @@
+inspections:
+  # We edit SourceNNN: files directly.
+  upstream: off
+
+  # We have expected glibc-internal uses of otherwise banned functions.
+  badfuncs: off
+
+rpmdeps:
+  # glibc-benchtests does not have exact version dependencies so
+  # that the benchmark package can be installed with other glibc versions.
+  ignore:
+    requires: ^lib[a-z]+\.so\.[0-9](\((\)|GLIBC_).*|)$
+
+debuginfo:
+  # ld.so ships with debuginfo to help observability tools.
+  # rpminspect treats the .symtab in the main DSOs as debuginfo, too.
+  # https://bugzilla.redhat.com/show_bug.cgi?id=1661513
+  # The sysroot packages have full debuginfo because there is
+  # no separate debuginfo for them.
+  ignore:
+    - /usr/lib*/ld*so*
+    - /usr/lib*/libc.so.6
+    - /usr/lib*/glibc-hwcaps/*/libc.so.6
+    - /usr/lib*/glibc-hwcaps/*/libm.so.6
+    - /usr/*/sys-root/*/usr/lib*/*
+
+annocheck:
+  # glibc is not built with LTO
+  # Note that all (default hardened) flags need to be repeated here, if
+  # you override some config flags it will completely overwrite the
+  # defaults (--ignore-unknown --verbose).
+  # Remove --disable-hardened after https://github.com/rpminspect/rpminspect/issues/1515 is fixed
+  jobs:
+    - hardened: --disable-hardened --skip-lto