The "spam" ACL condition code contained a sscanf() call with a %s
drwxr-xr-x - configs
drwxr-xr-x - doc
drwxr-xr-x - src
drwxr-xr-x - test