badfuncs:
  allowed:
    /usr/lib*/libICE.so.*:
      - gethostbyaddr