badfuncs:
  allowed:
    /usr/lib*/libnetfilter_conntrack.so.*:
      # Used explicitly in functions dealing with IPv4 addresses
      - inet_aton
      - inet_ntoa