Allow annocheck on rpminspect.yaml for non-static binaries

Signed-off-by: Bryan Gurney <bgurney@redhat.com>

rpminspect.yaml

@@ -2,8 +2,6 @@
 inspections:
   # none of our compiled code has an ABI
   abidiff: off
-  # at present the wrong debuginfo files are being used to run this check
-  annocheck: off
   # the project does not use .desktop files
   desktop: off
   # the project uses no Java
@@ -20,3 +18,12 @@ debuginfo:
   # https://bugzilla.redhat.com/show_bug.cgi?id=2166149
   ignore:
     - /usr/lib/udev/stratis*
+
+annocheck:
+  # annocheck error:
+  # Hardened: <path>: FAIL: stack-prot test because stack protection
+  # deliberately disabled (function: call_fini)
+  # Seems to be a consequence of including glibc-static when fully static
+  # compilation occurs.
+  ignore:
+    - /usr/lib/udev/stratis*

stratisd.spec

@@ -5,7 +5,7 @@
 
 Name:           stratisd
 Version:        3.5.1
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        Daemon that manages block devices to create filesystems
 
 # ASL 2.0
@@ -155,6 +155,9 @@ a2x -f manpage docs/stratisd.txt
 %{_systemd_util_dir}/system-generators/stratis-setup-generator
 
 %changelog
+* Tue Feb 28 2023 Bryan Gurney <bgurney@redhat.com> - 3.5.1-3
+- Allow annocheck on rpminspect.yaml for non-static binaries
+
 * Mon Feb 20 2023 Bryan Gurney <bgurney@redhat.com> - 3.5.1-2
 - Add debuginfo ignore to rpminspect.yaml