in src_configure() there is the construct: $(use_enable acl cifsacl cifsidmap) this results in configure being called with: ./configure … --enable-cifsacl=cifsidmap … however calling ./configure --help we see: --enable-cifsidmap Create cifs.idmap binary [default=yes] --enable-cifsacl Create get/set cifsacl binary [default=yes] so that construct needs to be split up $(use_enable acl cifsacl) $(use_enable acl cifsidmap) from the cifs.upcall man page: The keyutils package has also started including a dns_resolver handling program as well that is preferred over the one in ``cifs.upcall``. If you are using a keyutils version equal to or greater than 1.5, you should use ``key.dns_resolver`` to handle the ``dns_resolver`` keytype instead of ``cifs.upcall``. See key.dns_resolver(8) for more info. The only one version of keyutils is in main gentoo: sys-apps/keyutils-1.6.3-r1 so the src_install() construct echo 'create dns_resolver * * /usr/sbin/cifs.upcall %k' \ > "${ED}/etc/request-key.d/cifs.upcall.conf" should be removed Reproducible: Always Given that cifs-utils configure automatically builds cifs.idmap if it finds keyutils and if we don't explicitly disable it; the ebuild has been serendipitously doing what the user would have wanted (provided they had keyutils installed).
Created attachment 897784 [details] proposed cifs-utils-7.0-r2 ebuild
Created attachment 897785 [details] add USE=acl dep on keyutils cifs mounts with mount option cifsacl require the cifs.idmap upcall binary and cifs.idmap requires keyutils.
Created attachment 897786 [details, diff] patch between 7.0-r1 and 7.0-r2
