#
#=DESCRIPTION audit deny change_profile /onexec
#=EXRESULT PASS
#
/usr/bin/foo {
   audit deny change_profile /onexec -> /bin/*,
}

/usr/bin/foo2 {
   audit deny change_profile /onexec -> /bin/**,
}

/usr/bin/foo3 {
   audit deny change_profile /onexec -> /bin/?,
}

/usr/bin/foo4 {
   audit deny change_profile /onexec -> /bin/[ab],
}

/usr/bin/foo5 {
   audit deny change_profile /onexec -> /bin/[^ab],
}

