#
#=DESCRIPTION deny change_profile /onexec
#=EXRESULT PASS
#
/usr/bin/foo {
   deny change_profile /onexec -> /bin/*,
}

/usr/bin/foo2 {
   deny change_profile /onexec -> /bin/**,
}

/usr/bin/foo3 {
   deny change_profile /onexec -> /bin/?,
}

/usr/bin/foo4 {
   deny change_profile /onexec -> /bin/[ab],
}

/usr/bin/foo5 {
   deny change_profile /onexec -> /bin/[^ab],
}

