I noticed the QA notice when emerging dev-util/nvidia-cuda-sdk-2.1.1215.2015, so I am posting a bug like Portage suggests. * QA Notice: The following files contain writable and executable sections * Files with such sections will not work properly (or at all!) on some * architectures/operating systems. A bug should be filed at * http://bugs.gentoo.org/ to make sure the issue is fixed. * For more information, see http://hardened.gentoo.org/gnu-stack.xml * Please include the following list of files in your report: * Note: Bugs should be filed for the respective maintainers * of the package in question and not hardened@g.o. * RWX --- --- opt/cuda/sdk/bin/linux/release/smokeParticles * RWX --- --- opt/cuda/sdk/bin/linux/release/recursiveGaussian * RWX --- --- opt/cuda/sdk/bin/linux/release/particles * RWX --- --- opt/cuda/sdk/bin/linux/release/nbody * RWX --- --- opt/cuda/sdk/bin/linux/release/imageDenoising * RWX --- --- opt/cuda/sdk/bin/linux/release/simpleGL * RWX --- --- opt/cuda/sdk/bin/linux/release/simpleTexture3D * RWX --- --- opt/cuda/sdk/bin/linux/release/Mandelbrot * RWX --- --- opt/cuda/sdk/bin/linux/release/SobelFilter * RWX --- --- opt/cuda/sdk/bin/linux/release/volumeRender * RWX --- --- opt/cuda/sdk/bin/linux/release/boxFilter * RWX --- --- opt/cuda/sdk/bin/linux/release/bicubicTexture * RWX --- --- opt/cuda/sdk/bin/linux/release/oceanFFT * RWX --- --- opt/cuda/sdk/bin/linux/release/marchingCubes * RWX --- --- opt/cuda/sdk/bin/linux/release/fluidsGL * RWX --- --- opt/cuda/sdk/bin/linux/release/postProcessGL Reproducible: Always Steps to Reproduce: Add "dev-util/nvidia-cuda-sdk ~x86" to /etc/portage/package.keywords emerge --ask -v nvidia-cuda-sdk Portage 2.1.6.13 (default/linux/x86/2008.0, gcc-4.1.1, glibc-2.8_p20080602-r1, 2.6.22-gentoo-r9 i686) ================================================================= System uname: Linux-2.6.22-gentoo-r9-i686-Intel-R-_Core-TM-2_CPU_4300_@_1.80GHz-with-glibc2.0 Timestamp of tree: Thu, 11 Jun 2009 22:30:01 +0000 app-shells/bash: 3.2_p39 dev-java/java-config: 1.3.7-r1, 2.1.7 dev-lang/python: 2.4.4-r9, 2.5.2-r7 dev-python/pycrypto: 2.0.1-r8 dev-util/cmake: 2.4.6-r1 sys-apps/baselayout: 1.12.11.1 sys-apps/sandbox: 1.6-r2 sys-devel/autoconf: 2.13, 2.63 sys-devel/automake: 1.5, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2 sys-devel/binutils: 2.18-r3 sys-devel/gcc-config: 1.4.0-r4 sys-devel/libtool: 1.5.26 virtual/os-headers: 2.6.27-r2 ACCEPT_KEYWORDS="x86" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=i686 -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d" CXXFLAGS="-O2 -march=i686 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch" GENTOO_MIRRORS=" http://open-systems.ufl.edu/mirrors/gentoo ftp://ftp.gtlib.gatech.edu/pub/gentoo http://www.gtlib.gatech.edu/pub/gentoo ftp://distro.ibiblio.org/pub/linux/distributions/gentoo/ http://distro.ibiblio.org/pub/linux/distributions/gentoo/ " LANG="C" LDFLAGS="-Wl,-O1" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/portage/local/layman/sunrise /usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="X acl berkdb bzip2 cairo cli cracklib crypt cups dbus dri dvi fortran gdbm gif gpm gs gtk hal iconv ipv6 isdnlog jpeg lapack latex midi mpeg mudflap ncurses nls nptl nptlonly opengl openmp pam pcre perl png pppd python qt4 readline reflection session spl ssl sysfs tcpd tetex threads tiff unicode vim-syntax x86 xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="intel vesa" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LC_ALL, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
I have the feeling this is a binary package, and as such it may not be possible to solve these problems, but thanks for reporting the bug...
(In reply to comment #1) > I have the feeling this is a binary package, and as such it may not be possible > to solve these problems, but thanks for reporting the bug... It's partially binary -- the package builds its own binaries, but these are linked with .a files provided by the upstream, and it's object files inside these .a archives that have executable stacks. I marked all ebuilds with RESTRICT="binchecks" so that the users are not bothered by the QA warnings. Thanks for reporting this issue.