#
#=DESCRIPTION audit deny change_profile /onexec with just res
#=EXRESULT PASS
#

/usr/bin/foo {
   audit deny change_profile /onexec -> *,
}

/usr/bin/foo2 {
   audit deny change_profile /onexec -> **,
}

/usr/bin/foo3 {
   audit deny change_profile /onexec -> ?,
}

/usr/bin/foo4 {
   audit deny change_profile /onexec -> [ab],
}

/usr/bin/foo5 {
   audit deny change_profile /onexec -> [^ab],
}

