parent
5026b80440
commit
685a41fc27
20
rpminspect.yaml
Normal file
20
rpminspect.yaml
Normal file
@ -0,0 +1,20 @@
|
||||
---
|
||||
inspections:
|
||||
# xml files shipped are GDB register set descriptions which can only be
|
||||
# verified with gdb/features/gdb-target.dtd, provided in GDB sources.
|
||||
xml: off
|
||||
|
||||
annocheck:
|
||||
# Ignore files built specially without hardening flags
|
||||
ignore:
|
||||
# Valgrind tools themselves (memcheck, cachegrind, massif, etc) are
|
||||
# statically linked and need to be built without PIE to be loaded at
|
||||
# a fixed address in the program's address space.
|
||||
# Also need to be built without stack protection so the generated
|
||||
# code (valgrind VEX jit) interacts correctly with their own static code.
|
||||
- /usr/libexec/valgrind/*-*-linux
|
||||
# Wrappers for various string and mem functions such as memcpy, strlen, etc
|
||||
# that valgrind uses to keep track of memory usage. Hardening settings such
|
||||
# as optimizations need to be disabled so they don't interfere or break
|
||||
# the checks that valgrind does internally.
|
||||
- /usr/libexec/valgrind/vgpreload*so
|
Loading…
Reference in New Issue
Block a user