|
 |
c7f8c02 |
addFilter(r'crypto-policy-non-compliance-openssl')
|
|
|
c7f8c02 |
|
|
|
c7f8c02 |
# Ignore generated certificates
|
|
|
c7f8c02 |
addFilter(r'non-readable /etc/unbound/unbound_control.key')
|
|
|
c7f8c02 |
addFilter(r'non-readable /etc/unbound/unbound_control.pem')
|
|
|
c7f8c02 |
addFilter(r'non-readable /etc/unbound/unbound_server.key')
|
|
|
c7f8c02 |
addFilter(r'non-readable /etc/unbound/unbound_server.pem')
|
|
|
c7f8c02 |
|
|
|
c7f8c02 |
addFilter(r'non-standard-gid /etc/unbound/unbound_control.pem')
|
|
|
c7f8c02 |
addFilter(r'non-standard-gid /etc/unbound/unbound_control.key')
|
|
|
c7f8c02 |
addFilter(r'non-standard-gid /etc/unbound/unbound_server.pem')
|
|
|
c7f8c02 |
addFilter(r'non-standard-gid /etc/unbound/unbound_server.key')
|
|
|
c7f8c02 |
|
|
|
c7f8c02 |
# Yes, it is indeed certificate
|
|
|
c7f8c02 |
addFilter(r'pem-certificate /etc/unbound/icannbundle.pem')
|
|
|
c7f8c02 |
|
|
|
c7f8c02 |
# These files are intentionally replaceable.
|
|
|
c7f8c02 |
addFilter(r'conffile-without-noreplace-flag /etc/unbound/icannbundle.pem')
|
|
|
c7f8c02 |
addFilter(r'conffile-without-noreplace-flag /etc/unbound/root.key')
|
|
|
c7f8c02 |
addFilter(r'conffile-without-noreplace-flag /var/lib/unbound/root.key')
|
|
|
c7f8c02 |
|
|
|
c7f8c02 |
# ldconfig is no longer required
|
|
|
c7f8c02 |
addFilter(r'post[iu]n-without-ldconfig /usr/lib64/libunbound.so')
|
|
|
c7f8c02 |
|
|
|
c7f8c02 |
# Ignore unbound owned files
|
|
|
c7f8c02 |
addFilter(r'non-standard-[ug]id (/var/lib|/etc|/run)/unbound')
|
|
|
c7f8c02 |
|
|
|
c7f8c02 |
# Ignore spelling errors
|
|
|
c7f8c02 |
addFilter(r'spelling-error %description -l en_US ep ')
|
|
|
c7f8c02 |
addFilter(r'spelling-error %description -l en_US resolvers ')
|