#Extra ignores
/sbin/grep
/usr/bin/autom4te
/usr/bin/automake
/usr/bin/autoreconf
/usr/bin/cc
/usr/bin/flex
/usr/bin/gcc
/usr/bin/gmake
/usr/bin/hostinfo
/usr/bin/m4
/usr/bin/make
/usr/bin/newaliases
/usr/bin/oslevel
/usr/bin/pkg-config
/usr/bin/schedtool
/usr/bin/unzip
/usr/convex/getsysinfo
/usr/lib/git-core/git
/usr/lib/git-core/git-remote-https
/usr/lib/openssh/sftp-server
/usr/lib/snapd/snapd
/usr/lib/update-notifier/update-motd-updates-available
/usr/local/bin/grep
/usr/local/bin/mkdir
/usr/local/sbin/dpkg-query
/usr/local/sbin/gcc
/usr/local/sbin/grep
/usr/local/sbin/mkdir
/usr/sbin/grep
/usr/sbin/ifconfig
/usr/sbin/make-ssl-cert
/usr/sbin/postconf
/usr/share/debconf/frontend
/usr/share/update-notifier/notify-reboot-required
usr/libexec/grepconf.sh
### malware scanners ###
#chkrootkit
/usr/sbin/chkrootkit
/sbin/chkrootkit
#ClamAV
/usr/bin/clamscan
#LMD
/usr/local/maldetect/maldet
/usr/local/maldetect/internals/tlog
/usr/local/sbin/maldet
#lynis
/usr/local/bin/lynis
#malscan
/usr/local/bin/malscan
/usr/bin/freshclam
#Radare2
/usr/local/bin/r2
#Rkhunter
/usr/share/rkhunter/scripts/rkhupd.sh
/usr/bin/rkhunter
/usr/share/rkhunter/scripts/readlink.sh
#tiger
/usr/lib/tiger/bin/realpath
/usr/lib/tiger/scripts/check_accounts
/usr/lib/tiger/scripts/check_aliases
/usr/lib/tiger/scripts/check_anonftp
/usr/lib/tiger/scripts/check_crontabs
/usr/lib/tiger/scripts/check_exports
/usr/lib/tiger/scripts/check_group
/usr/lib/tiger/scripts/check_known
/usr/lib/tiger/scripts/check_netrc
/usr/lib/tiger/scripts/check_passwd
/usr/lib/tiger/scripts/check_path
/usr/lib/tiger/scripts/check_perms
/usr/lib/tiger/scripts/check_rhosts
/usr/lib/tiger/scripts/check_root
/usr/lib/tiger/scripts/check_rootkit
/usr/lib/tiger/scripts/check_services
/usr/lib/tiger/scripts/find_files
/usr/lib/tiger/systems/Linux/2/check_bootloader
/usr/lib/tiger/systems/Linux/2/check_inittab
/usr/lib/tiger/systems/Linux/2/check_network_config
/usr/lib/tiger/systems/Linux/2/check_neverlogin
/usr/lib/tiger/systems/Linux/2/check_passwdspec
/usr/lib/tiger/systems/Linux/2/check_rcumask
/usr/lib/tiger/systems/Linux/2/check_release
/usr/lib/tiger/systems/Linux/2/check_single
/usr/lib/tiger/systems/Linux/2/deb_checkmd5sums
/usr/lib/tiger/systems/Linux/5/check
/usr/lib/tiger/systems/Linux/5/check_cron
/usr/lib/tiger/systems/Linux/5/gen_alias_sets
/usr/lib/tiger/systems/Linux/5/gen_bootparam_sets
/usr/lib/tiger/systems/Linux/5/gen_cron
/usr/lib/tiger/systems/Linux/5/gen_export_sets
/usr/lib/tiger/systems/Linux/5/gen_group_sets
/usr/lib/tiger/systems/Linux/5/gen_inetd
/usr/lib/tiger/systems/Linux/5/gen_mounts
/usr/lib/tiger/systems/Linux/5/gen_passwd_sets
/usr/lib/tiger/systems/Linux/5/gen_services
/usr/lib/tiger/systems/Linux/5/getdisks
/usr/lib/tiger/systems/Linux/5/getuserhome
/usr/lib/tiger/util/getfs-std
/usr/lib/tiger/util/gethostinfo
/usr/lib/tiger/util/sgrep
/usr/local/bin/remnux
/usr/sbin/tiger
/usr/sbin/twadmin
# RHEL 9 python shebang
/bin/2to3
/bin/a2x
/bin/a2x.py
/bin/activate-global-python-argcomplete
/bin/apol
/bin/audit2allow
/bin/audit2why
/bin/bno_plot.py
/bin/cg_annotate
/bin/cg_diff
/bin/cg_merge
/bin/chcat
/bin/cockpit-bridge
/bin/debuginfo-install
/bin/distro
/bin/dnf
/bin/dnf-3
/bin/f2py
/bin/f2py.numpy
/bin/f2py3
/bin/f2py3.9
/bin/firewall-cmd
/bin/firewall-offline-cmd
/bin/flatpak-bisect
/bin/flatpak-coredumpctl
/bin/gnome-browser-connector
/bin/gnome-browser-connector-host
/bin/gnome-shell-extension-tool
/bin/gnome-shell-perf-tool
/bin/insights-client
/bin/itstool
/bin/kvm_stat
/bin/libwacom-update-db
/bin/miniterm-3.9.py
/bin/miniterm-3.py
/bin/miniterm.py
/bin/msgfmt.py
/bin/msgfmt3.9.py
/bin/msgfmt3.py
/bin/needs-restarting
/bin/orca
/bin/package-cleanup
/bin/pathfix.py
/bin/pathfix3.9.py
/bin/pflags
/bin/pip
/bin/pip-3
/bin/pip-3.9
/bin/pip3
/bin/pip3.9
/bin/powerprofilesctl
/bin/pydoc
/bin/pyinotify
/bin/python-argcomplete-check-easy-install-script
/bin/rct
/bin/register-python-argcomplete
/bin/repo-graph
/bin/repoclosure
/bin/repodiff
/bin/repomanage
/bin/repoquery
/bin/reposync
/bin/repotrack
/bin/rhsm-debug
/bin/rhui-eus-switch
/bin/rpmdev-bumpspec
/bin/rpmdev-checksig
/bin/rpmdev-rmdevelrpms
/bin/rpmdev-sort
/bin/rpmdev-spectool
/bin/rpmdev-vercmp
/bin/sealert
/bin/seapplet
/bin/sechecker
/bin/seinfo
/bin/seinfoflow
/bin/sesearch
/bin/sim_lsmplugin
/bin/spectool
/bin/stap-profile-annotate
/bin/switcherooctl
/bin/team2bond
/bin/yelp-build
/bin/yelp-check
/bin/yelp-new
/bin/yum
/bin/yum-builddep
/bin/yum-config-manager
/bin/yum-debug-dump
/bin/yum-debug-restore
/bin/yum-groups-manager
/bin/yumdownloader
/sbin/authconfig
/sbin/choose_repo.py
/sbin/cups-genppdupdate
/sbin/firewalld
/sbin/mountstats
/sbin/nfsdclddb
/sbin/nfsdclnts
/sbin/nfsiostat
/sbin/rh-cloud-firstboot.py
/sbin/rpcctl
/sbin/semanage
/sbin/setroubleshootd
/sbin/sos
/sbin/sos-collector
/sbin/sosreport
/sbin/subscription-manager
/sbin/tuned
/sbin/tuned-adm
/sbin/upgrade_get_document
/usr/bin/2to3
/usr/bin/a2x
/usr/bin/a2x.py
/usr/bin/activate-global-python-argcomplete
/usr/bin/apol
/usr/bin/audit2allow
/usr/bin/audit2why
/usr/bin/bno_plot.py
/usr/bin/cg_annotate
/usr/bin/cg_diff
/usr/bin/cg_merge
/usr/bin/chcat
/usr/bin/cockpit-bridge
/usr/bin/debuginfo-install
/usr/bin/distro
/usr/bin/dnf
/usr/bin/dnf-3
/usr/bin/f2py
/usr/bin/f2py.numpy
/usr/bin/f2py3
/usr/bin/f2py3.9
/usr/bin/firewall-cmd
/usr/bin/firewall-offline-cmd
/usr/bin/flatpak-bisect
/usr/bin/flatpak-coredumpctl
/usr/bin/gnome-browser-connector
/usr/bin/gnome-browser-connector-host
/usr/bin/gnome-shell-extension-tool
/usr/bin/gnome-shell-perf-tool
/usr/bin/insights-client
/usr/bin/itstool
/usr/bin/kvm_stat
/usr/bin/libwacom-update-db
/usr/bin/miniterm-3.9.py
/usr/bin/miniterm-3.py
/usr/bin/miniterm.py
/usr/bin/msgfmt.py
/usr/bin/msgfmt3.9.py
/usr/bin/msgfmt3.py
/usr/bin/needs-restarting
/usr/bin/orca
/usr/bin/package-cleanup
/usr/bin/pathfix.py
/usr/bin/pathfix3.9.py
/usr/bin/pflags
/usr/bin/pip
/usr/bin/pip-3
/usr/bin/pip-3.9
/usr/bin/pip3
/usr/bin/pip3.9
/usr/bin/powerprofilesctl
/usr/bin/pydoc
/usr/bin/pyinotify
/usr/bin/python-argcomplete-check-easy-install-script
/usr/bin/rct
/usr/bin/register-python-argcomplete
/usr/bin/repo-graph
/usr/bin/repoclosure
/usr/bin/repodiff
/usr/bin/repomanage
/usr/bin/repoquery
/usr/bin/reposync
/usr/bin/repotrack
/usr/bin/rhsm-debug
/usr/bin/rhui-eus-switch
/usr/bin/rpmdev-bumpspec
/usr/bin/rpmdev-checksig
/usr/bin/rpmdev-rmdevelrpms
/usr/bin/rpmdev-sort
/usr/bin/rpmdev-spectool
/usr/bin/rpmdev-vercmp
/usr/bin/sealert
/usr/bin/seapplet
/usr/bin/sechecker
/usr/bin/seinfo
/usr/bin/seinfoflow
/usr/bin/sesearch
/usr/bin/sim_lsmplugin
/usr/bin/spectool
/usr/bin/stap-profile-annotate
/usr/bin/switcherooctl
/usr/bin/team2bond
/usr/bin/yelp-build
/usr/bin/yelp-check
/usr/bin/yelp-new
/usr/bin/yum
/usr/bin/yum-builddep
/usr/bin/yum-config-manager
/usr/bin/yum-debug-dump
/usr/bin/yum-debug-restore
/usr/bin/yum-groups-manager
/usr/bin/yumdownloader
/usr/sbin/authconfig
/usr/sbin/choose_repo.py
/usr/sbin/cups-genppdupdate
/usr/sbin/firewalld
/usr/sbin/mountstats
/usr/sbin/nfsdclddb
/usr/sbin/nfsdclnts
/usr/sbin/nfsiostat
/usr/sbin/rh-cloud-firstboot.py
/usr/sbin/rpcctl
/usr/sbin/semanage
/usr/sbin/setroubleshootd
/usr/sbin/sos
/usr/sbin/sos-collector
/usr/sbin/sosreport
/usr/sbin/subscription-manager
/usr/sbin/tuned
/usr/sbin/tuned-adm
/usr/sbin/upgrade_get_document
# Ubuntu 24.04 python shebangs
/bin/check-language-support
/bin/gnome-language-selector
/bin/gnome-music
/bin/gnome-shell-test-tool
/bin/gnome-terminal
/bin/gnome-tweaks
/bin/hibagent
/bin/hibinit-agent
/bin/mako-render
/bin/markdown-it
/bin/mesa-overlay-control.py
/bin/netaddr
/bin/nvidia-detector
/bin/pygmentize
/bin/pygrub
/bin/quirks-handler
/bin/software-properties-gtk
/bin/spd-conf
/bin/ubuntu-drivers
/bin/xencons
/bin/xencov_split
/bin/xentrace_format
/sbin/aptd
/sbin/argdist-bpfcc
/sbin/bashreadline-bpfcc
/sbin/bindsnoop-bpfcc
/sbin/biolatency-bpfcc
/sbin/biolatpcts-bpfcc
/sbin/biopattern-bpfcc
/sbin/biosnoop-bpfcc
/sbin/biotop-bpfcc
/sbin/bitesize-bpfcc
/sbin/bpflist-bpfcc
/sbin/btrfsdist-bpfcc
/sbin/btrfsslower-bpfcc
/sbin/cachestat-bpfcc
/sbin/cachetop-bpfcc
/sbin/capable-bpfcc
/sbin/compactsnoop-bpfcc
/sbin/cpudist-bpfcc
/sbin/cpuunclaimed-bpfcc
/sbin/criticalstat-bpfcc
/sbin/dbslower-bpfcc
/sbin/dbstat-bpfcc
/sbin/dcsnoop-bpfcc
/sbin/dcstat-bpfcc
/sbin/deadlock-bpfcc
/sbin/dirtop-bpfcc
/sbin/drsnoop-bpfcc
/sbin/execsnoop-bpfcc
/sbin/exitsnoop-bpfcc
/sbin/ext4dist-bpfcc
/sbin/ext4slower-bpfcc
/sbin/filegone-bpfcc
/sbin/filelife-bpfcc
/sbin/fileslower-bpfcc
/sbin/filetop-bpfcc
/sbin/funccount-bpfcc
/sbin/funcinterval-bpfcc
/sbin/funclatency-bpfcc
/sbin/funcslower-bpfcc
/sbin/gethostlatency-bpfcc
/sbin/gnome-menus-blacklist
/sbin/hardirqs-bpfcc
/sbin/inject-bpfcc
/sbin/killsnoop-bpfcc
/sbin/klockstat-bpfcc
/sbin/kvmexit-bpfcc
/sbin/llcstat-bpfcc
/sbin/mdflush-bpfcc
/sbin/memleak-bpfcc
/sbin/mountsnoop-bpfcc
/sbin/mysqld_qslower-bpfcc
/sbin/netqtop-bpfcc
/sbin/nfsdist-bpfcc
/sbin/nfsslower-bpfcc
/sbin/offcputime-bpfcc
/sbin/offwaketime-bpfcc
/sbin/oomkill-bpfcc
/sbin/opensnoop-bpfcc
/sbin/pidpersec-bpfcc
/sbin/ppchcalls-bpfcc
/sbin/profile-bpfcc
/sbin/rdmaucma-bpfcc
/sbin/readahead-bpfcc
/sbin/runqlat-bpfcc
/sbin/runqlen-bpfcc
/sbin/runqslower-bpfcc
/sbin/shmsnoop-bpfcc
/sbin/slabratetop-bpfcc
/sbin/sofdsnoop-bpfcc
/sbin/softirqs-bpfcc
/sbin/solisten-bpfcc
/sbin/sslsniff-bpfcc
/sbin/stackcount-bpfcc
/sbin/statsnoop-bpfcc
/sbin/syncsnoop-bpfcc
/sbin/syscount-bpfcc
/sbin/threadsnoop-bpfcc
/sbin/tplist-bpfcc
/sbin/trace-bpfcc
/sbin/ttysnoop-bpfcc
/sbin/ucalls
/sbin/uflow
/sbin/ugc
/sbin/uobjnew
/sbin/ustat
/sbin/uthreads
/sbin/vfscount-bpfcc
/sbin/vfsstat-bpfcc
/sbin/virtiostat-bpfcc
/sbin/wakeuptime-bpfcc
/sbin/xfsdist-bpfcc
/sbin/xfsslower-bpfcc
/sbin/zfsdist-bpfcc
/sbin/zfsslower-bpfcc
/usr/bin/2to3-2.7
/usr/bin/analyze-build-17
/usr/bin/aptdcon
/usr/bin/asan_symbolize
/usr/bin/asan_symbolize-10
/usr/bin/asan_symbolize-13
/usr/bin/asan_symbolize-17
/usr/bin/asciinema
/usr/bin/aws
/usr/bin/aws_completer
/usr/bin/chardet3
/usr/bin/chardetect3
/usr/bin/check-language-support
/usr/bin/clang-format-diff-13
/usr/bin/clang-format-diff-17
/usr/bin/clang-tidy-diff-17.py
/usr/bin/f2py3.8
/usr/bin/gnome-language-selector
/usr/bin/gnome-music
/usr/bin/gnome-shell-test-tool
/usr/bin/gnome-terminal
/usr/bin/gnome-tweaks
/usr/bin/hibagent
/usr/bin/hibinit-agent
/usr/bin/hmaptool-17
/usr/bin/hwasan_symbolize-17
/usr/bin/intercept-build-17
/usr/bin/mako-render
/usr/bin/markdown-it
/usr/bin/mesa-overlay-control.py
/usr/bin/miniterm
/usr/bin/netaddr
/usr/bin/nvidia-detector
/usr/bin/pdb3.8
/usr/bin/policygentool
/usr/bin/py3rsa-decrypt
/usr/bin/py3rsa-encrypt
/usr/bin/py3rsa-keygen
/usr/bin/py3rsa-priv2pub
/usr/bin/py3rsa-sign
/usr/bin/py3rsa-verify
/usr/bin/pycompile
/usr/bin/pygmentize
/usr/bin/pygrub
/usr/bin/pyjwt3
/usr/bin/pyversions
/usr/bin/quirks-handler
/usr/bin/rr-collect-symbols.py
/usr/bin/rst-buildhtml
/usr/bin/rst2html
/usr/bin/rst2html4
/usr/bin/rst2html5
/usr/bin/rst2latex
/usr/bin/rst2man
/usr/bin/rst2odt
/usr/bin/rst2odt_prepstyles
/usr/bin/rst2pseudoxml
/usr/bin/rst2s5
/usr/bin/rst2xetex
/usr/bin/rst2xml
/usr/bin/rstpep2html
/usr/bin/run-clang-tidy-17
/usr/bin/run-clang-tidy-17.py
/usr/bin/sandbox
/usr/bin/scan-build-py-17
/usr/bin/scan-view-17
/usr/bin/sepolgen
/usr/bin/sepolgen-ifgen
/usr/bin/sepolicy
/usr/bin/software-properties-gtk
/usr/bin/spd-conf
/usr/bin/ubuntu-drivers
/usr/bin/xencons
/usr/bin/xencov_split
/usr/bin/xentrace_format
/usr/local/bin/cmake-annotate
/usr/local/bin/cmake-format
/usr/local/bin/cmake-genparsers
/usr/local/bin/cmake-lint
/usr/local/bin/ctest-to
/usr/sbin/aptd
/usr/sbin/argdist-bpfcc
/usr/sbin/bashreadline-bpfcc
/usr/sbin/bindsnoop-bpfcc
/usr/sbin/biolatency-bpfcc
/usr/sbin/biolatpcts-bpfcc
/usr/sbin/biopattern-bpfcc
/usr/sbin/biosnoop-bpfcc
/usr/sbin/biotop-bpfcc
/usr/sbin/bitesize-bpfcc
/usr/sbin/bpflist-bpfcc
/usr/sbin/btrfsdist-bpfcc
/usr/sbin/btrfsslower-bpfcc
/usr/sbin/cachestat-bpfcc
/usr/sbin/cachetop-bpfcc
/usr/sbin/capable-bpfcc
/usr/sbin/check-selinux-installation
/usr/sbin/compactsnoop-bpfcc
/usr/sbin/cpudist-bpfcc
/usr/sbin/cpuunclaimed-bpfcc
/usr/sbin/criticalstat-bpfcc
/usr/sbin/dbslower-bpfcc
/usr/sbin/dbstat-bpfcc
/usr/sbin/dcsnoop-bpfcc
/usr/sbin/dcstat-bpfcc
/usr/sbin/deadlock-bpfcc
/usr/sbin/dirtop-bpfcc
/usr/sbin/drsnoop-bpfcc
/usr/sbin/execsnoop-bpfcc
/usr/sbin/exitsnoop-bpfcc
/usr/sbin/ext4dist-bpfcc
/usr/sbin/ext4slower-bpfcc
/usr/sbin/filegone-bpfcc
/usr/sbin/filelife-bpfcc
/usr/sbin/fileslower-bpfcc
/usr/sbin/filetop-bpfcc
/usr/sbin/funccount-bpfcc
/usr/sbin/funcinterval-bpfcc
/usr/sbin/funclatency-bpfcc
/usr/sbin/funcslower-bpfcc
/usr/sbin/gethostlatency-bpfcc
/usr/sbin/gnome-menus-blacklist
/usr/sbin/hardirqs-bpfcc
/usr/sbin/inject-bpfcc
/usr/sbin/iotop
/usr/sbin/killsnoop-bpfcc
/usr/sbin/klockstat-bpfcc
/usr/sbin/kvmexit-bpfcc
/usr/sbin/llcstat-bpfcc
/usr/sbin/mdflush-bpfcc
/usr/sbin/memleak-bpfcc
/usr/sbin/mountsnoop-bpfcc
/usr/sbin/mysqld_qslower-bpfcc
/usr/sbin/netqtop-bpfcc
/usr/sbin/nfsdist-bpfcc
/usr/sbin/nfsslower-bpfcc
/usr/sbin/offcputime-bpfcc
/usr/sbin/offwaketime-bpfcc
/usr/sbin/oomkill-bpfcc
/usr/sbin/opensnoop-bpfcc
/usr/sbin/pidpersec-bpfcc
/usr/sbin/ppchcalls-bpfcc
/usr/sbin/profile-bpfcc
/usr/sbin/rdmaucma-bpfcc
/usr/sbin/readahead-bpfcc
/usr/sbin/runqlat-bpfcc
/usr/sbin/runqlen-bpfcc
/usr/sbin/runqslower-bpfcc
/usr/sbin/shmsnoop-bpfcc
/usr/sbin/slabratetop-bpfcc
/usr/sbin/sofdsnoop-bpfcc
/usr/sbin/softirqs-bpfcc
/usr/sbin/solisten-bpfcc
/usr/sbin/sslsniff-bpfcc
/usr/sbin/stackcount-bpfcc
/usr/sbin/statsnoop-bpfcc
/usr/sbin/syncsnoop-bpfcc
/usr/sbin/syscount-bpfcc
/usr/sbin/threadsnoop-bpfcc
/usr/sbin/tplist-bpfcc
/usr/sbin/trace-bpfcc
/usr/sbin/ttysnoop-bpfcc
/usr/sbin/ucalls
/usr/sbin/uflow
/usr/sbin/ugc
/usr/sbin/uobjnew
/usr/sbin/ustat
/usr/sbin/uthreads
/usr/sbin/vfscount-bpfcc
/usr/sbin/vfsstat-bpfcc
/usr/sbin/virtiostat-bpfcc
/usr/sbin/wakeuptime-bpfcc
/usr/sbin/xfsdist-bpfcc
/usr/sbin/xfsslower-bpfcc
/usr/sbin/zfsdist-bpfcc
/usr/sbin/zfsslower-bpfcc
