sleuthkit-1.73-r1.ebuild introduced a patch to sleuthkit: sleuthkit-1.73_dbtool.patch The problem is that both the ebuild and the patch try to correct the build of mactime (by modifying src/timeline/config-perl) to use standard library paths. Since sleuthkit-1.73_dbtool.patch is a patch it removes the good lines, but in the ebuild the command is: sed -i '63,69d' src/timeline/config-perl || die "sed config-perl failed" and it removes a few more lines, in the fact the ones that copy the content of mactime.base in the final version of mactime With this problem the content of mactime is limited to "#!/usr/bin/perl" ! Just remove the sed command from the ebuild to get every thing right. Reproducible: Always Steps to Reproduce:
fixed finally. I'm sorry I overlooked this for so long. Thanks for the full explanation.
