---
specname:
    match: suffix
runpath:
    allowed_paths:
        - /usr/lib64/samba
annocheck:
    - hardened: --ignore-unknown --verbose --skip-run-path