With FEATURES="stricter", emul-linux-x86-gtklibs fails with: QA Notice: the following files contain executable stacks Files with executable stacks will not work properly (or at all!) on some architectures/operating systems. A bug should be filed at http://bugs.gentoo.org/ to make sure the file is fixed. For more information, see http://hardened.gentoo.org/gnu-stack.xml Please include this file in your report: /var/tmp/portage/emul-linux-x86-gtklibs-2.8.8/temp/scanelf-execstack.log RWX --- --- emul/linux/x86/usr/lib/libgdk_pixbuf.so.2.0.0 RWX --- --- emul/linux/x86/usr/lib/libgdk_pixbuf_xlib.so.2.0.0 !!! ERROR: app-emulation/emul-linux-x86-gtklibs-2.8.8 failed. Call stack: misc-functions.sh, line 407: Called install_qa_check misc-functions.sh, line 164: Called die !!! Aborting due to QA concerns: execstacks
Whoops, meant execstacks... Here's the workaround: QA_EXECSTACK_amd64="emul/linux/x86/usr/lib/libgdk_pixbuf.so.2.0.0 emul/linux/x86/usr/lib/libgdk_pixbuf_xlib.so.2.0.0"
Maybe the package can be rebuilt solving the issue instead of masking the exec stack.
solution is ignore.. gtk+ 1.2 is too painful to rebuild... if you care about security, you don't use binary stuff anyways.
I don't think this is a good solution where we have free access to the sources. Some packages like wine depends on emul-linux packages, well, maybe not on emul-linux-x86-gtklibs, but since we compile against emul-linux libraries, it's not a good idea leave exec stack around if we can remove them. If it's only a matter of time required for rebuilding or lazyness please reopen the bug and let someone with time and skill solve the issue.
Re-building the gtk 1 libraries is painful. Recent stuff like wine I hope uses GTK2. Only very crappy old software usees GTK+ 1.. Which is why I'm not going to spend any effort fixing them.
Could we at the very least get QA_EXECSTACK_amd64="emul/linux/x86/usr/lib/libgdk_pixbuf.so.2.0.0 emul/linux/x86/usr/lib/libgdk_pixbuf_xlib.so.2.0.0" added to the ebuild, so it doesn't fail with FEATURES="stricter".
its been added
