of the package in question and not hardened@g.o. │ │RWX --- --- usr/lib64/clisp-2.47/full/lisp.run │ │RWX --- --- usr/lib64/clisp-2.47/base/lisp.run │ │ │ │ERROR: other │ │ │ │ERROR: dev-lisp/clisp-2.47-r1 failed. │ │Call stack: misc-functions.sh, line 729: Called install_qa_check │ │ misc-functions.sh, line 241: Called die │ │The specific snippet of code: │ │ die "Aborting due to QA concerns: ${die_msg}" │ │ The die message: │ │ Aborting due to QA concerns: execstacks │ │ Reproducible: Always Steps to Reproduce: 1.emerge clisp 2. 3. Actual Results: will attach emerge --info and log if needed -note- search 'execstacks' turns up at least two more. Expected Results: installed with proper permissions Portage 2.1.6.13 (default/linux/amd64/10.0/developer, gcc-4.3.2, glibc-2.9_p20081201-r2, 2.6.30-gentoo-r5 x86_64) ================================================================= System uname: Linux-2.6.30-gentoo-r5-x86_64-AMD_Athlon-tm-_Dual_Core_Processor_4850e-with-gentoo-1.12.11.1 Timestamp of tree: Mon, 28 Sep 2009 20:45:01 +0000 ccache version 2.4 [enabled] app-shells/bash: 4.0_p28 dev-java/java-config: 2.1.8-r1 dev-lang/python: 2.5.4-r3, 2.6.2-r1 dev-util/ccache: 2.4-r7 sys-apps/baselayout: 1.12.11.1 sys-apps/sandbox: 1.6-r2 sys-devel/autoconf: 2.13, 2.63-r1 sys-devel/automake: 1.5, 1.7.9-r1, 1.9.6-r2, 1.10.2 sys-devel/binutils: 2.18-r3 sys-devel/gcc-config: 1.4.1 sys-devel/libtool: 2.2.6a virtual/os-headers: 2.6.27-r2 ACCEPT_KEYWORDS="amd64" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-mtune=k8 -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d" CXXFLAGS="-mtune=k8 -O2 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="ccache collision-protect cvs digest distlocks fixpackages multilib-strict parallel-fetch protect-owned sandbox sfperms sign splitdebug strict stricter unmerge-orphans userfetch userpriv usersandbox" GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo" LDFLAGS="-Wl,-O1" LINGUAS="en" MAKEOPTS="-j3" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" USE="3dnow 3dnowext 7zip X a52 aac aalib abiword acct acl acpi addition additions aften aio alsa amd64 amr amrnb amrr amrwb ao aotuv apache2 apop applet archive ares artworkextra ass audio audiofile audit authcram authexternal autoipd backtrace beagle bee berkdb bluetooth bookmarks branding brasero builder bzip2 cairo calendar caps catalogs cdaudio cdda cdio cdparanoia cdr cdrkit cdrom cdrtools cdsound cgc chicken chm chroot clamav clamd clamdtop cleartype cli clisp community consolekit corefonts cpudetection cracklib crypt cups dbus deskbar dga dict dirac disk-partition doc dri dts dvd dvdnav dvdr eds emboss emoticon empathy encode enscript epiphany evo extra-algorithms extra-ciphers extraengine extrafilters faac faad faillog fam fame fat fbsplash ffmpeg firefox firefox3 flac fltk fluidsynth fontconfig force-cgi-redirect fortran fortune fuse games gconf gcrypt gdbm gdm gdml geant3 geant4 genders geoip gif gkrellm glade glib glut gmail gmedia gnet gnome gnome-keyring gnome-session gnomecd gnutls google gpm grub gstreamer gtkhtml gtkmm gtkspell guile hal html htmlsingle hvm iconv idea ieee1394 ipv6 isdnlog jadetex java jpeg jpeg2k kde ldap libnotify libwww mad mikmod mmx modules mp3 mp4 mpeg mplayer mtrr mudflap multilib mysql nautilus ncurses networking nls nptl nptlonly ogg opengl openmp pam pango pcre pdf perl png ppds pppd python qt3support qt4 quicktime readline reflection ruby rubytests sdl sensord session shadow smp snmp sockets socks socks5 spell spl sqlite sse sse2 ssl startup-notification svg sysfs tcpd threads thunar tiff tk truetype unicode usb vorbis x264 xml xorg xulrunner xv xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en" USERLAND="GNU" VIDEO_CARDS="radeon vesa radeonhd" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
err file list----> Completed installing xvid-1.2.2-r1 into /var/tmp/portage/media-libs/xvid-1.2.2-r1/image/ strip: x86_64-pc-linux-gnu-strip --strip-unneeded -R .comment usr/lib64/libxvidcore.so.4.2 usr/lib64/libxvidcore.a * QA Notice: The following files contain writable and executable sections * Files with such sections will not work properly (or at all!) on some * architectures/operating systems. A bug should be filed at * http://bugs.gentoo.org/ to make sure the issue is fixed. * For more information, see http://hardened.gentoo.org/gnu-stack.xml * Please include the following list of files in your report: * Note: Bugs should be filed for the respective maintainers * of the package in question and not hardened@g.o. * !WX --- --- usr/lib64/libxvidcore.a:cbp_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:cbp_sse2.o * !WX --- --- usr/lib64/libxvidcore.a:fdct_mmx_ffmpeg.o * !WX --- --- usr/lib64/libxvidcore.a:fdct_mmx_skal.o * !WX --- --- usr/lib64/libxvidcore.a:fdct_sse2_skal.o * !WX --- --- usr/lib64/libxvidcore.a:idct_3dne.o * !WX --- --- usr/lib64/libxvidcore.a:idct_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:idct_sse2_dmitry.o * !WX --- --- usr/lib64/libxvidcore.a:colorspace_rgb_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:colorspace_yuv_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:colorspace_yuyv_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:interpolate8x8_3dn.o * !WX --- --- usr/lib64/libxvidcore.a:interpolate8x8_3dne.o * !WX --- --- usr/lib64/libxvidcore.a:interpolate8x8_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:interpolate8x8_xmm.o * !WX --- --- usr/lib64/libxvidcore.a:postprocessing_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:postprocessing_sse2.o * !WX --- --- usr/lib64/libxvidcore.a:reduced_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:qpel_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:gmc_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:deintl_sse.o * !WX --- --- usr/lib64/libxvidcore.a:sad_xmm.o * !WX --- --- usr/lib64/libxvidcore.a:sad_sse2.o * !WX --- --- usr/lib64/libxvidcore.a:sad_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:sad_3dne.o * !WX --- --- usr/lib64/libxvidcore.a:sad_3dn.o * !WX --- --- usr/lib64/libxvidcore.a:quantize_h263_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:quantize_h263_3dne.o * !WX --- --- usr/lib64/libxvidcore.a:quantize_mpeg_xmm.o * !WX --- --- usr/lib64/libxvidcore.a:quantize_mpeg_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:mem_transfer_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:mem_transfer_3dne.o * !WX --- --- usr/lib64/libxvidcore.a:interlacing_mmx.o * !WX --- --- usr/lib64/libxvidcore.a:cpuid.o * !WX --- --- usr/lib64/libxvidcore.a:plugin_ssim-a.o * RWX --- --- usr/lib64/libxvidcore.so.4.2 * * ERROR: media-libs/xvid-1.2.2-r1 failed. * Call stack: * misc-functions.sh, line 729: Called install_qa_check * misc-functions.sh, line 241: Called die * The specific snippet of code: * die "Aborting due to QA concerns: ${die_msg}" * The die message: * Aborting due to QA concerns: execstacks * * If you need support, post the topmost build error, and the call stack if relevant. * A complete build log is located at '/var/log/portage/media-libs:xvid-1.2.2-r1:20090928-194355.log'. * The ebuild environment file is located at '/var/tmp/portage/media-libs/xvid-1.2.2-r1/temp/environment'. * !!! post install failed; exiting. !!! A network error occured while trying to send logmail: [Errno -2] Name or service not known Sure you configured PORTAGE_ELOG_MAILURI correctly? >>> Failed to emerge media-libs/xvid-1.2.2-r1, Log file:
;-( sorry for previous noise ^ cat scanelf-execstack.log RWX --- --- image/usr/lib64/clisp-2.47/full/lisp.run RWX --- --- image/usr/lib64/clisp-2.47/base/lisp.run RWX --- --- work/clisp-2.47/builddir/full/lisp.run RWX --- --- work/clisp-2.47/builddir/base/lisp.run RWX --- --- work/clisp-2.47/builddir/lisp.run
*** Bug 313191 has been marked as a duplicate of this bug. ***
Wouldn't it be possible to close this bug before it gets its 6th anniversary? I understand that it is perhaps too much effort to avoid the executable stack, but I guess that it would not be that hard to inherit pax-utils and call a corresponding pax-mark for the binaries which cannot be fixed, before they are executed. This way, users of hardened kernels could at least install and use clisp without manual interaction.
=dev-lisp/clisp-2.47 is not in the tree. Current clisp version is =dev-lisp/clisp-2.49.90
