I was busy trying to figure out how it happens the system ends up generating binaries without GNU_STACK header in case pax marking suppose to happen during the ebuild (1-3), I also noticed current firefox and thunderbird ebuilds uses a compile-time python2.7 instance without -E marking, therefore throwing a bunch of "denied RWX mmap of <anonymous mapping>" messages in the log. The two binaries are: /var/tmp/portage/mail-client/thunderbird-45.2.0/work/thunderbird-45.2.0/tbird/_virtualenv/bin/python2.7 and /var/tmp/portage/www-client/firefox-48.0/work/firefox-48.0/ff/_virtualenv/bin/python2.7 I'm not sure what would be the proper treatment here...
1. https://bugs.gentoo.org/show_bug.cgi?id=590422 2. https://bugs.gentoo.org/show_bug.cgi?id=590334 3. https://bugs.gentoo.org/show_bug.cgi?id=589828 -- dr Tóth Attila, Radiológus, 06-20-825-8057 Attila Toth MD, Radiologist, +36-20-825-8057