From c83c1cdcee789c8f509204448b8b1f7c62295c49 Mon Sep 17 00:00:00 2001
From: Michal Srb <msrb@redhat.com>
Date: Apr 17 2024 15:36:18 +0000
Subject: Fix rpminspect.yaml syntax


Any entries in the upstream inspection block that contain wildcards for glob(7) specification need to be wrapped in single quotes.

We are also changing the badfuncs block to allow the specific function in mod_proxy.so rather than ignoring the entire file.

Thanks to David Cantrell who discovered this problem (in OSCI-6724) and proposed the fix.
---

diff --git a/rpminspect.yaml b/rpminspect.yaml
index 17e48d1..7696d42 100644
--- a/rpminspect.yaml
+++ b/rpminspect.yaml
@@ -2,20 +2,21 @@
 badfuncs:
   # mod_proxy uses inet_ntoa (safely) for IPv4 address matching,
   # and APR interfaces for IPv6 addresses.
-  ignore:
-    - /usr/lib*/httpd/modules/mod_proxy.so
+  allowed:
+    /usr/lib*/httpd/modules/mod_proxy.so:
+      - inet_ntoa
 upstream:
   ignore:
-    - *.xml
-    - *.service
-    - *.socket
-    - *.conf
-    - *.sysconf
-    - *.tmpfiles
-    - README.*
-    - *.sysusers
-    - *.png
-    - httpd-ssl-*
+    - '*.xml'
+    - '*.service'
+    - '*.socket'
+    - '*.conf'
+    - '*.sysconf'
+    - '*.tmpfiles'
+    - 'README.*'
+    - '*.sysusers'
+    - '*.png'
+    - 'httpd-ssl-*'
     - config.layout
-    - action*.sh
-    - apachectl.*
+    - 'action*.sh'
+    - 'apachectl.*'