When emerging maxima I get this notice telling me to report a bug: * QA Notice: The following files contain executable stacks * Files with executable stacks will not work properly (or at all!) * on some architectures/operating systems. A bug should be filed * at http://bugs.gentoo.org/ to make sure the file is fixed. * For more information, see http://hardened.gentoo.org/gnu-stack.xml * Please include this file in your report: * /var/tmp/portage/sci-mathematics/maxima-5.13.0-r1/temp/scanelf-execstack.log * RWX --- --- usr/lib64/maxima/5.13.0/binary-clisp/lisp.run Maxima is compiled with the useflags: clisp emacs latex nls tk unicode -cmucl -gcl -linguas_es -linguas_pt -linguas_pt_BR -sbcl # cat /var/tmp/portage/sci-mathematics/maxima-5.13.0-r1/temp/scanelf-execstack.log RWX --- --- image/usr/lib64/maxima/5.13.0/binary-clisp/lisp.run (however the file was removed when the emerge was finished, so I had to re-run the emerge and copy it just before it was removed, I would suggest it is saved so the file isn't removed in future portage versions, you will miss a lot of bug reports because people are too lazy to re-emerge packages, at least for large ones) emerge --info: Portage 2.1.4.4 (default-linux/amd64/2007.0/desktop, gcc-4.1.2, glibc-2.6.1-r0, 2.6.24-gentoo-r3 x86_64) ================================================================= System uname: 2.6.24-gentoo-r3 x86_64 AMD Sempron(tm) Processor 3300+ Timestamp of tree: Tue, 08 Apr 2008 20:04:01 +0000 ccache version 2.4 [disabled] app-shells/bash: 3.2_p17-r1 dev-java/java-config: 1.3.7, 2.1.4 dev-lang/python: 2.4.4-r9 dev-python/pycrypto: 2.0.1-r6 dev-util/ccache: 2.4-r7 sys-apps/baselayout: 1.12.11.1 sys-apps/sandbox: 1.2.18.1-r2 sys-devel/autoconf: 2.13, 2.61-r1 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10 sys-devel/binutils: 2.18-r1 sys-devel/gcc-config: 1.4.0-r4 sys-devel/libtool: 1.5.26 virtual/os-headers: 2.6.23-r3 ACCEPT_KEYWORDS="amd64" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=k8 -pipe -O2 -msse3" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config /var/bind /var/gopher/gophermap" CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c /etc/udev/rules.d" CXXFLAGS="-march=k8 -pipe -O2 -msse3" DISTDIR="/usr/portage/distfiles" FEATURES="distlocks metadata-transfer parallel-fetch sandbox sfperms strict unmerge-orphans userfetch userpriv usersandbox" GENTOO_MIRRORS="http://trumpetti.atm.tut.fi/gentoo/ http://ftp.linux.ee/pub/gentoo/distfiles/ http://mirror.muntinternet.net/pub/gentoo/ http://mirror.gentoo.no/" LINGUAS="en en_GB sv sv_SE" MAKEOPTS="-j1" PKGDIR="/usr/portage/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage/crossdev-overlay /usr/local/portage/cpan-overlay /usr/local/portage/nethack-overlay /usr/local/portage/generic-overlay" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="3dnow 3dnowext X acl acpi alsa amd64 arts audiofile bash-completion berkdb bzip2 cairo caps ccache cdb cdr cli cracklib crypt cups curl dbus dri dvd dvdr dvdread emacs emboss encode evo exif expat fam fastcgi fbcon firefox flac fontconfig foomaticdb fortran gd gdbm gif glep gmp gnutls gpm gstreamer gtk iconv idea idn ieee1394 imlib iproute2 ipv6 isdnlog javascript joystick jpeg jpeg2k kde kdeenablefinal kdehiddenvisibility kqemu lcms lm_sensors logrotate lyx mad mbox midi mikmod mmx mmxext mng mono mozdevelop mp3 mpeg mudflap mysql mysqli ncurses nls nodrm nptl nptlonly nsplugin objc ogg openexr opengl openmp pam pcre pdf perl php physfs pic png ppds pppd python qt3 qt3support qt4 quicktime readline reflection rle scanner sdl session sndfile spell spl sqlite sse sse2 ssl svg tcl tcpd tetex tiff tk truetype unicode usb utempter vorbis xcomposite xorg xpm xv zlib zsh-completion" ALSA_CARDS="emu10k1 loopback seq-dummy dummy" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse joystick evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en en_GB sv sv_SE" USERLAND="GNU" VIDEO_CARDS="ati radeon vesa fbdev r128 nv nvidia" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
This is because maxima is written in lisp. Lisp usually *has* to have executable stack and/or heap, because it generates code on the fly and executes it. Executable stack is not always a bug, it can have legitimate uses (lisp, for example). Some modern security-ensuring systems make it very hard to have executable stack (and/or heap), and each minor change in such systems breaks all lisp systems. This is a bug in these security systems, not in lisp.
