badfuncs:
allowed:
/usr/lib*/libnetfilter_conntrack.so.*:
# Used explicitly in functions dealing with IPv4 addresses
- inet_aton
- inet_ntoa