Opera's ebuild already contain paxmarking command, but looks like it doesn't work since opera-12 - either file name is wrong (plugin wrappers are now in separate subdirectory), or "C" option needed in addition to "m" option.
Index: opera-12.00.1467.ebuild =================================================================== RCS file: /var/cvsroot/gentoo-x86/www-client/opera/opera-12.00.1467.ebuild,v retrieving revision 1.5 diff -u -B -r1.5 opera-12.00.1467.ebuild --- opera-12.00.1467.ebuild 18 Jun 2012 02:34:00 -0000 1.5 +++ opera-12.00.1467.ebuild 19 Jun 2012 12:16:03 -0000 @@ -196,7 +196,7 @@ > "${D}"/etc/revdep-rebuild/90${PN} # Set PaX markings for hardened/PaX (bug #344267) - pax-mark m "${D}"/${OPREFIX}/${PN}/opera* + pax-mark m $( list-paxables $( find "${D}"/${OPREFIX}/${PN}/ ) ) } pkg_preinst() { Is this doing what you expect?
I have added that patch to =www-client/opera-12.00.1467-r1 (and to =www-client/opera-next-12.01.1473 ). Please test and reopen this bug report if it still is not right.