---
specname:
    match: suffix
runpath:
    allowed_paths:
        - /usr/lib64/samba