QA_EXECSTACK="usr/bin/xanim-export usr/lib/xanim/mods-export/*" results in: QA Notice: the following files contain executable stacks Files with executable stacks will not work properly (or at all!) on some architectures/operating systems. A bug should be filed at http://bugs.gentoo.org/ to make sure the file is fixed. For more information, see http://hardened.gentoo.org/gnu-stack.xml Please include this file in your report: /var/tmp/portage/xanim-export-2.80.1-r4/temp/scanelf-execstack.log !WX --- --- usr/lib/xanim/mods-export/xa2.1_iv32_linuxELFg21.o !WX --- --- usr/lib/xanim/mods-export/xa1.0_cyuv_linuxELFg21.o !WX --- --- usr/lib/xanim/mods-export/xa2.0_iv32_linuxELF.o !WX --- --- usr/lib/xanim/mods-export/xa2.0_cvid_linuxELFg21.o !WX --- --- usr/lib/xanim/mods-export/xa2.0_cvid_linuxELF.o !WX --- --- usr/lib/xanim/mods-export/xa1.0_cyuv_linuxELF.o Same with QA_EXECSTACK="*" or QA_EXECSTACK="usr/bin/xanim-export usr/lib/xanim/mods-export/xa2.1_iv32_linuxELFg21.o ... " (list all the stuff there) or when separated via newlines or with whatever else. The only thing that gets actually honored is QA_EXECSTACK="usr/bin/xanim-export" ; anything that follows is ignored. So, what's the correct syntax here if you need multiple entries???
Created attachment 95019 [details] scanelf-execstack.log
Portage 2.1.1_pre5-r3 (default-linux/x86/2006.0, gcc-4.1.1, glibc-2.4-r3, 2.6.17-gentoo-r5 i686) ================================================================= System uname: 2.6.17-gentoo-r5 i686 AMD Athlon(tm) XP 1600+ Gentoo Base System version 1.12.4 Last Sync: Thu, 24 Aug 2006 08:01:01 +0000 ccache version 2.4 [enabled] app-admin/eselect-compiler: [Not Present] dev-lang/python: 2.4.3-r1 dev-python/pycrypto: 2.0.1-r5 dev-util/ccache: 2.4-r2 dev-util/confcache: 0.4.2-r1 sys-apps/sandbox: 1.2.18.1 sys-devel/autoconf: 2.13, 2.60 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2 sys-devel/binutils: 2.16.93, 2.17, 2.17.50.0.3 sys-devel/gcc-config: 1.3.13-r3 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.17 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=athlon-xp -O2 -pipe -fomit-frame-pointer -fforce-addr -ftree-vectorize" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config" CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/splash /etc/terminfo" CXXFLAGS="-march=athlon-xp -O2 -pipe -fomit-frame-pointer -fforce-addr -ftree-vectorize" DISTDIR="/usr/portage/distfiles" EMERGE_DEFAULT_OPTS="--alphabetical" FEATURES="autoconfig ccache collision-protect confcache distlocks metadata-transfer parallel-fetch sandbox sfperms splitdebug strict userfetch userpriv usersandbox" GENTOO_MIRRORS="ftp://ftp.sh.cvut.cz/MIRRORS/gentoo/gentoo ftp://ftp.fi.muni.cz/pub/linux/gentoo/" LANG="en_US.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--sort-common" LINGUAS="cs en" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_RSYNC_EXTRA_OPTS="--progress" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 3dnow 3dnowext 7zip X X509 a52 aac acl acpi alsa apm asf audiofile bash-completion berkdb bluetooth bzip2 caps cddb cdparanoia cdr chroot cli crypt cscope css cups curl curlwrappers dbx dga dlloader dri dts dv dvd dvdr dvdread elibc_glibc encode ethereal exif expat fam fbcon ffmpeg fftw firefox flac flash flatfile foomaticdb gd gdbm gif glibc-omitfp glut gmp gpm gstreamer iconv icq idn imagemagick imap imlib inifile input_devices_joystick input_devices_keyboard input_devices_mouse ipv6 irda jack javascript jbig joystick jpeg jpeg2k kdeenablefinal kdehiddenvisibility kernel_linux lcms libcaca libg++ libsamplerate libwww linguas_cs linguas_en lirc lirc_devices_cph06x lm_sensors logrotate mad maildir matroska mikmod mime mmap mmx mng mp3 mpeg musepack musicbrainz ncurses nls nodrm nptl nptlonly nsplugin nvidia offensive ogg openal opengl pam pcre pdf perl png ppds python qt3 quicktime readline real reflection samba sdl session sftplogging skey sndfile speex spell spl sse ssl svg symlink tcpd theora threads tiff truetype udev unicode urandom usb userland_GNU v4l v4l2 vcd video_cards_fbdev video_cards_nv video_cards_nvidia video_cards_v4l video_cards_vesa video_cards_vmware vorbis win32codecs wmf x264 xine xinerama xinetd xml xml2 xmlrpc xorg xosd xpm xv xvid xvmc zlib" Unset: CTARGET, INSTALL_MASK, LC_ALL
These variables are all handled internally by scanelf. Which version of pax-utils is it (maybe it doesn't matter)?
(In reply to comment #3) > Which version of pax-utils is it (maybe it doesn't matter)? 0.1.13
QA_* vars with scanelf uses regexps, not globs
(In reply to comment #5) > QA_* vars with scanelf uses regexps, not globs Did you really read the description? It doesn't work even without any globbing, only one entry gets honored.
And, for what's it worth, either explicitely documenting that globbing won't work or (preferably) making the thing honor globbing again (it certainly worked at one point) would be useful - see dev-libs/klibc, media-gfx/picasa for reason. ;)
no reason to be a prick
fixed in cvs
*** Bug 148688 has been marked as a duplicate of this bug. ***
