The ebuild does pax marking by calling paxctl or chpax directly. There are two problems: 1) chpax is deprecated and we are working on removing legacy pax markings, 2) paxctl is not guaranteed to be installed on the user's system, yet you can still do the necessary pax markings with scanelf, which is there because of profiles. The pax-util.eclass has pax-mark which intelligently does this. Reproducible: Always
Old bug that hasn't received love in a long time ... and become obsolete.