# Static binaries are intentional: these execute inside snap mount namespaces
# and must not depend on any dynamically linked libraries.
addFilter('statically-linked-binary /usr/libexec/snapd/snap-exec')
addFilter('statically-linked-binary /usr/libexec/snapd/snap-gdbserver-shim')
addFilter('statically-linked-binary /usr/libexec/snapd/snap-update-ns')
addFilter('statically-linked-binary /usr/libexec/snapd/snapctl')

# /snap and /var/snap are required by the snap ecosystem design
# TODO address during/before review
addFilter('filelist-forbidden-fhs23 /snap')
addFilter('filelist-forbidden-fhs23 /var/snap')

# libselinux-utils is pulled in by the %{?selinux_requires} macro
addFilter('explicit-lib-dependency libselinux-utils')

# The dbus system defines a directory with additional policy files, but does not
# use allow, thus confusing rpmlint
addFilter('dbus-policy-missing-allow /usr/share/dbus-1/system.d/snapd.system-services.conf')
