17b0b4e042
Any entries in the upstream inspection block that contain wildcards for glob(7) specification need to be wrapped in single quotes. We are also changing the badfuncs block to allow the specific function in mod_proxy.so rather than ignoring the entire file. Thanks to David Cantrell who discovered this problem (in OSCI-6724) and proposed the fix.
23 lines
443 B
YAML
23 lines
443 B
YAML
---
|
|
badfuncs:
|
|
# mod_proxy uses inet_ntoa (safely) for IPv4 address matching,
|
|
# and APR interfaces for IPv6 addresses.
|
|
allowed:
|
|
/usr/lib*/httpd/modules/mod_proxy.so:
|
|
- inet_ntoa
|
|
upstream:
|
|
ignore:
|
|
- '*.xml'
|
|
- '*.service'
|
|
- '*.socket'
|
|
- '*.conf'
|
|
- '*.sysconf'
|
|
- '*.tmpfiles'
|
|
- 'README.*'
|
|
- '*.sysusers'
|
|
- '*.png'
|
|
- 'httpd-ssl-*'
|
|
- config.layout
|
|
- 'action*.sh'
|
|
- 'apachectl.*'
|