You get the following errors with FEATURES="stricter". The workaround to get it merged is to RESTRICT="stricter" in the ebuild. QA Notice: pre-stripped files found: /var/tmp/portage/cisco-vpnclient-3des-4.8.00.0490/image/opt/cisco-vpnclient/bin/vpnclient /var/tmp/portage/cisco-vpnclient-3des-4.8.00.0490/image/opt/cisco-vpnclient/bin/cvpnd /var/tmp/portage/cisco-vpnclient-3des-4.8.00.0490/image/opt/cisco-vpnclient/bin/ipseclog /var/tmp/portage/cisco-vpnclient-3des-4.8.00.0490/image/opt/cisco-vpnclient/bin/cisco_cert_mgr strip: i686-pc-linux-gnu-strip --strip-unneeded opt/cisco-vpnclient/lib/libvpnapi.so making executable: /opt/cisco-vpnclient/lib/libvpnapi.so QA Notice: the following files are setXid, dyn linked, and using lazy bindings This combination is generally discouraged. Try re-emerging the package: LDFLAGS='-Wl,-z,now' emerge cisco-vpnclient-3des LAZY opt/cisco-vpnclient/bin/cvpnd QA Notice: the following files contain runtime text relocations Text relocations force the dynamic linker to perform extra work at startup, waste system resources, and may pose a security risk. On some architectures, the code may not even function properly, if at all. For more information, see http://hardened.gentoo.org/pic-fix-guide.xml Please include this file in your report: /var/tmp/portage/cisco-vpnclient-3des-4.8.00.0490/temp/scanelf-textrel.log TEXTREL opt/cisco-vpnclient/lib/libvpnapi.so QA Notice: the following files contain executable stacks Files with executable stacks will not work properly (or at all!) on some architectures/operating systems. A bug should be filed at http://bugs.gentoo.org/ to make sure the file is fixed. For more information, see http://hardened.gentoo.org/gnu-stack.xml Please include this file in your report: /var/tmp/portage/cisco-vpnclient-3des-4.8.00.0490/temp/scanelf-execstack.log RWX --- --- opt/cisco-vpnclient/bin/vpnclient RWX --- --- opt/cisco-vpnclient/bin/cvpnd RWX --- --- opt/cisco-vpnclient/bin/ipseclog RWX --- --- opt/cisco-vpnclient/bin/cisco_cert_mgr RWX --- --- opt/cisco-vpnclient/lib/libvpnapi.so !!! ERROR: net-misc/cisco-vpnclient-3des-4.8.00.0490 failed. Call stack: misc-functions.sh, line 407: Called install_qa_check misc-functions.sh, line 164: Called die !!! Aborting due to QA concerns: setXid lazy bindings, textrels, execstacks
Added RESTRICT="stricter" since this is a (mostly) binary package and none of the errors are on the compiled parts.
