--- ghc-9.2.8.ebuild-orig	2023-12-27 11:10:23.000000000 +0100
+++ ghc-9.2.8.ebuild-dwok	2023-12-27 11:11:31.663711076 +0100
@@ -555,6 +555,7 @@ src_prepare() {
 			# ghci uses mmap with rwx protection at it implements dynamic
 			# linking on it's own (bug #299709)
 			pax-mark -m "${WORKDIR}/usr/$(get_libdir)/${PN}-${bin_pv}/bin/ghc"
+			pax-mark -m "${WORKDIR}/usr/$(get_libdir)/${PN}-${bin_pv}/bin/ghc-pkg"
 		fi
 	fi
 
@@ -865,6 +866,12 @@ src_compile() {
 		fi
 		# 3. and then all the rest
 		emake all
+		pax-mark -m utils/ghc-pkg/dist/build/tmp/ghc-pkg
+		pax-mark -m utils/ghc-pkg/dist-install/build/tmp/ghc-pkg
+		pax-mark -m inplace/lib/bin/ghc-pkg
+		pax-mark -m utils/ghc-cabal/dist/build/tmp/ghc-cabal
+		pax-mark -m utils/ghc-cabal/dist-install/build/tmp/ghc-cabal
+		pax-mark -m inplace/bin/ghc-cabal
 	fi # ! use binary
 }