syslog-ng python modules are byte compiled at runtime and thus outside of the control of the package manager and will remain as cruft after removing syslog-ng. E.g. python modules in this directories will be byte compiled when fist running syslog-ng: /usr/lib64/syslog-ng/python/syslogng /usr/lib64/syslog-ng/python/syslogng/modules/hypr There are more python modules around but maybe they are not used. The ebuild calls python_optimize [1] to byte compile modules. This however only works if the modules are installed to standard locations. If this is not the case the paths to the modules have to be specified. python_optimize "${ED}"/usr/lib64/syslog-ng/python [1] https://projects.gentoo.org/python/guide/helper.html#byte-compiling-python-modules
