TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjavaplugin_oji.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libhpi.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/javaplugin.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjavaplugin_ojigcc3.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libnet.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjavaplugin_jnigcc3.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libnio.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libdbgmalloc.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/librmi.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libframe.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libute.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libfontmanager.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjsoundalsa.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libzip.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libhprof.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjsound.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libJdbcOdbc.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjaas.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjava.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjawt.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjdwp.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjitc.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libxhpi.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libdcpr.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libdt_socket.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjpeg.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjsig.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libibmcomm.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libjavaplugin_jni.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libawt.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/libcmm.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/classic/libjvm.so TEXTREL opt/ibm-jdk-bin-1.4.2.04/jre/bin/classic/libcore.so This is an upstream issue, but the ebuild should RESTRICT "stricter".
All of the prebuilt VMs most likely contain this QA problem. Perhaps we could set the RESTRICT="stricter" in java.eclass, since all VMs would inherit from it?
No, that is a bad idea. Not all VMs are closed source and not all may necessarily contain this. Id say leave the warnings there because they should exist. Upstream should fix these issues.
dev-java/ibm-jdk-bin-1.5.0.2 QA Notice: the following files contain runtime text relocations Text relocations force the dynamic linker to perform extra work at startup, waste system resources, and may pose a security risk. On some architectures, the code may not even function properly, if at all. For more information, see http://hardened.gentoo.org/pic-fix-guide.xml Please include this file in your report: /var/tmp/portage/ibm-jdk-bin-1.5.0.2/temp/scanelf-textrel.log TEXTREL opt/ibm-jdk-bin-1.5.0.2/jre/bin/libjclscar_23.so TEXTREL opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9jit23.so QA Notice: the following files contain executable stacks Files with executable stacks will not work properly (or at all!) on some architectures/operating systems. A bug should be filed at http://bugs.gentoo.org/ to make sure the file is fixed. For more information, see http://hardened.gentoo.org/gnu-stack.xml Please include this file in your report: /var/tmp/portage/ibm-jdk-bin-1.5.0.2/temp/scanelf-execstack.log RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libjclscar_23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9vrb23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9vm23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9trc23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9thr23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9shr23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9prt23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9jvmti23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9jpi23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9jit23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9jextract.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9hookable23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9gc23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9dyn23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9dmp23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9dbg23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libj9bcv23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/libiverel23.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/classic/libjvm.so RWX --- --- opt/ibm-jdk-bin-1.5.0.2/jre/bin/j9vm/libjvm.so
Fixed in CVS for dev-java/ibm-jdk-bin-1.5.0.2 for amd64.
So, to summarize: * 1.4.2.04 and 1.5.0 are obsolete, will be removed when s390 keywords new versions, no point in fixing. * 1.4.2.6-r1 was fixed for all arches when stabilizing, I've ported the QA vars into 1.4.2.6-r4, so 1.4 slot is done * 1.5.0.2 is now fixed on x86 and amd64 What's left: 1.5.0.2 on ppc/ppc64. Arches, please test and add those QA vars as needed.
Fixed ppc. There didn't seem to be any on ppc64.
All fix. Resolving.
