QA Notice: the following files contain executable stacks Files with executable stacks will not work properly (or at all!) on some architectures/operating systems. A bug should be filed at http://bugs.gentoo.org/ to make sure the file is fixed. For more information, see http://hardened.gentoo.org/gnu-stack.xml Please include this file in your report: /var/tmp/portage/splashutils-1.1.9.10-r1/temp/scanelf-execstack.log RWX --- --- sbin/splash_helper my info: Portage 2.1_pre6-r1 (default-linux/amd64/2006.0, gcc-3.4.5, glibc-2.4-r0, 2.6.15-gentoo-r7 x86_64) ================================================================= System uname: 2.6.15-gentoo-r7 x86_64 AMD Athlon(tm) 64 Processor 3500+ Gentoo Base System version 1.12.0_pre16 distcc 2.18.3 x86_64-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled] ccache version 2.4 [enabled] dev-lang/python: 2.4.2-r1 sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.16.1-r2 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r3 ACCEPT_KEYWORDS="amd64 ~amd64" AUTOCLEAN="yes" CBUILD="x86_64-pc-linux-gnu" CFLAGS=" -march=athlon64 -Os -pipe -fforce-addr -ffast-math -msse2 -ftracer -m3dnow " CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/kde/3/share/config /usr/share/X11/xkb /usr/share/config /var/bind /var/qmail/control" CONFIG_PROTECT_MASK="/etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/splash /etc/terminfo /etc/texmf/web2c /etc/env.d" CXXFLAGS=" -march=athlon64 -Os -pipe -fforce-addr -ffast-math -msse2 -ftracer -m3dnow " DISTDIR="/home/ftp/distfiles" FEATURES="autoconfig ccache collision-protect cvs distlocks elog metadata-transfer multilib-strict sandbox sfperms sign strict stricter test userpriv" GENTOO_MIRRORS="ftp://mirror.switch.ch/mirror/gentoo/ http://gentoo.osuosl.org/ http://mirror.ovh.net/gentoo-distfiles/ ftp://ftp.heanet.ie/pub/gentoo/ http://www.die.unipd.it/pub/Linux/distributions/gentoo-sources/ ftp://ftp.unina.it/pub/linux/distributions/gentoo http://gentoo.ngi.it http://mirror.switch.ch/ftp/mirror/gentoo/ ftp://mirror.switch.ch/mirror/gentoo/ " LANG="it_IT.utf8" LINGUAS="it" PKGDIR="/home/ftp/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/overlays/migration-overlay /usr/local/overlays/tinyos /usr/local/overlays/gentoo-java-experimental" SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" USE="amd64 7zip X a52 aac aalib acl acpi alsa apache2 arts asf audiofile avi berkdb bitmap-fonts bzip2 cairo canvas ccache cdb cddb cdparanoia cdr chroot cpudetection crypt css cups curl dba dbus dga directfb dlloader dri dts dv dvd dvdr dvdread dynagraph emboss encode erandom esd exif expat extrafilters fame ffmpeg firefox flac fltk foomaticdb gd gdbm ggi gif gimp gimpprint glibc-omitfp glut gmp gnokii gnome gnutls gphoto2 gpm graphviz gstreamer gtk gtk2 gtkhtml guile hal idn ieee1394 imagemagick imlib ipv6 ithreads java jbig jikes jpeg jpeg2k justify kde kdeenablefinal lcms ldap libcaca linuxthreads-tls lm_sensors logitech-mouse logrotate lzo lzw lzw-tiff mad mailwrapper mbox mdb mhash mikmod mjpeg mmap mng motif mozsvg mp3 mpeg mpm-worker musicbrainz mysql ncurses nls nptl nptlonly numeric nvidia odbc offensive ogg on-the-fly-crypt openexr opengl oss pam pcre pcsc-lite pdf pdflib perl php png povray ppds python qt quicktime rdesktop readline rtc samba scanner sdl slang smp snmp speex spell ssl subversion svg sysfs tcltk tcpd test tetex tga theora threads tidy tiff timidity truetype truetype-fonts type1-fonts unicode usb userlocales utf8 v4l v4l2 vcd vda vorbis wmf xcomposite xine xinerama xml2 xmms xpm xscreensaver xv xvid yv12 zlib elibc_glibc input_devices_mouse input_devices_evdev input_devices_keyboard kernel_linux linguas_it userland_GNU video_cards_nvidia" Unset: ASFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, LC_ALL, LDFLAGS, MAKEOPTS
I've got this QA notice about execstacks too: QA Notice: the following files contain executable stacks Files with executable stacks will not work properly (or at all!) on some architectures/operating systems. A bug should be filed at http://bugs.gentoo.org/ to make sure the file is fixed. For more information, see http://hardened.gentoo.org/gnu-stack.xml Please include this file in your report: /var/tmp/portage/splashutils-1.1.9.10-r1/temp/scanelf-execstack.log RWX --- --- sbin/splash_helper home ~ # cat /var/tmp/portage/splashutils-1.1.9.10-r1/temp/scanelf-execstack.log RWX --- --- work/splashutils-1.1.9.10/splash_helper RWX --- --- image/sbin/splash_helper home ~ # # emerge --info Portage 2.1_pre6-r3 (default-linux/x86/2006.0, gcc-4.1.0, glibc-2.4-r0, 2.6.15-gentoo-r7 i686) ================================================================= System uname: 2.6.15-gentoo-r7 i686 Intel(R) Celeron(R) CPU 2.00GHz Gentoo Base System version 1.12.0_pre16 ccache version 2.4 [enabled] dev-lang/python: 2.3.5-r2, 2.4.2-r1 sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.16.1-r2 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r3 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-Os -march=pentium4 -pipe -fomit-frame-pointer" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/lib/mozilla/defaults/pref /usr/share/X11/xkb /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/revdep-rebuild /etc/terminfo /etc/env.d" CXXFLAGS="-Os -march=pentium4 -pipe -fomit-frame-pointer" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig ccache distlocks metadata-transfer sandbox sfperms strict" GENTOO_MIRRORS="http://trumpetti.atm.tut.fi/gentoo/ ftp://ftp.dtiltas.lt/mirror/gentoo/ http://pandemonium.tiscali.de/pub/gentoo/" LC_ALL="lt_LT.utf8" LINGUAS="lt" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 X a52 aac aalib acpi alsa apm artworkextra asf audiofile avi bash-completion berkdb bitmap-fonts browserplugin bzip2 cairo cdb cdparanoia cdr chroot crypt curl dbus dri dv dvd dvdread eds emboss encode exif expat fam fat ffmpeg firefox flac foomaticdb fortran gd gdbm gif glut gnome gnutls gpm gstreamer gtk gtk2 gtkhtml hal howl idn imagemagick imlib irssi java javascript jpeg lame lcms libg++ libwww live logrotate mad matroska mikmod mjpeg mmx mmxext mng motif mozilla mp3 mpeg mplayer nautilus ncurses network nls nptl nptlonly nsplugin ntfs numeric nvidia offensive ogg oggvorbis openal opengl oss pam pdf pdflib perl pic png python quicktime readline real reiser4 reiserfs sdl shorten spell sqlite sse sse2 ssl symlink tcpd tiff truetype truetype-fonts type1-fonts udev unicode usb vcd vidix vorbis win32codecs wxwindows xchat xine xml xml2 xv xvid zlib elibc_glibc input_devices_keyboard input_devices_mouse kernel_linux linguas_lt userland_GNU video_cards_nvidia" Unset: ASFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, LANG, LDFLAGS
The executable stack comes from dev-libs/klibc. You should probably file a separate bug for that package and then add it as a dependency to this one.
See comment #7 from bug #139330 for an explanation of where the executable stacks come from.
