--- /usr/portage/sys-apps/chpax/files/pax-conf.d	2004-01-20 06:36:52.000000000 -0500
+++ /etc/conf.d/chpax	2004-03-04 17:31:56.729310448 -0500
@@ -1,28 +1,43 @@
 ####################################################################
-#         Copyright 1999-2004 Gentoo Technologies, Inc.            #
+#         Copyright 1999-2003 Gentoo Technologies, Inc.            #
 # Distributed under the terms of the GNU General Public License v2 #
 ####################################################################
-#
-# p	do not enforce paging based non-executable pages
-# e	do not emulate trampolines
-# r	do not randomize mmap() base [ELF only]
-# m	do not restrict mprotect()
-# s	do not enforce segmentation based non-executable pages
-# x	do not randomize ET_EXEC base [ELF only]
-# z	zero flag mask
-
-JAVA=/opt/blackdown-jdk-*/jre/{java,java_vm,keytool,kinit,klist,ktab,orbd,policytool,rmid,rmiregistry,servertool,tnameserv}
-WINE=/usr/lib/wine/bin/wine/{wine,winebuild,wineclipsrv,winedump,winegcc,wineserver,winewrap}
-
-# most things that need pageexec need segmexec and or vice versa so we set both.
-PAGEEXEC_EXEMPT="/usr/X11R6/bin/XFree86 /usr/bin/xmms /usr/bin/mplayer /opt/OpenOffice*/program/soffice.bin \
- /usr/bin/blender /usr/bin/gxine /usr/bin/totem /usr/bin/acme $JAVA $WINE"
+# chpax	prefix	description
+# p	PE	do not enforce paging based non-executable pages
+# E	ET	emulate trampolines
+# r	RE	do not randomize mmap() base [ELF only]
+# m	ME	do not restrict mprotect()
+# s	SE	do not enforce segmentation based non-executable pages
+# x	XE	do not randomize ET_EXEC base [ELF only]
 
+# "blkdwn_java" would be blackdown-jdk or blackdown-jre
+
+# chpax command.  If using multiple tools, can separate by spaces.
+# This one hits BOTH chpax and paxctl
+CHPAX="/sbin/chpax /sbin/paxctl"
+#CHPAX="/sbin/paxctl"
+#CHPAX="/sbin/chpax"
+
+PE_wine=/usr/lib/wine/bin/{wine{,build,clipsrv,dump,gcc,server,wrap,-{k,p}thread},w{mc,rc,idl}}
+PE_blackdown_java=/opt/blackdown-{jdk-*/{,jre/},jre-*/}bin/{java{,_vm},keytool,kinit,klist,ktab,orbd,policytool,rmi{d,registry},servertool,tnameserv}
+PE_openoffice=/opt/OpenOffice.org*/program/soffice.bin
+PE_misc="/usr/X11R6/bin/XFree86 /usr/bin/xmms /usr/bin/mplayer \
+ /usr/bin/blender /usr/bin/gxine /usr/bin/xine /usr/bin/totem /usr/bin/acme \
+ /usr/bin/gnome-sound-recorder /usr/games/bin/bzflag /usr/bin/xfce4-panel"
+RE_blkdwn_java="${PE_blkdwn_java}"
+ME_blkdwn_java="${PE_blkdwn_java}"
+XE_blkdwn_java="${PE_blkdwn_java}"
+
+####################################
+# Settings are really applied here #
+####################################
+
+PAGEEXEC_EXEMPT="${PEMISC} ${PE_wine} ${PE_blkdwn_java} ${PE_openoffice}"
 TRAMPOLINE_EXEMPT=""
-MPROTECT_EXEMPT=""
-RANDMMAP_EXEMPT=""
+MPROTECT_EXEMPT="${ME_blkdwn_java}"
+RANDMMAP_EXEMPT="${RE_blkdwn_java}"
 SEGMEXEC_EXEMPT="${PAGEEXEC_EXEMPT}"
-RANDEXEC_EXEMPT="${JAVA}"
+RANDEXEC_EXEMPT="${XE_blkdwn_java}"
 
 # when zero flag mask is set to "yes" it will remove all pax flags from all files on reboot/stop
-ZERO_FLAG_MASK=yes
+ZERO_FLAG_MASK="no"