testing/geary: pax mark binary

due to webkit's javascript JIT

testing/geary/APKBUILD

 # Maintainer: Natanael Copa <ncopa@alpinelinux.org>
 pkgname=geary
 pkgver=0.6.0
-pkgrel=1
+pkgrel=2
 pkgdesc="A lightweight email program designed around conversations"
 url="http://yorba.org/geary/"
 arch="all"
@@ -11,7 +11,8 @@ depends_dev=""
 makedepends="$depends_dev"
 makedepends="$depends_dev cmake vala gtk+3.0-dev gmime-dev libgee-dev
 	desktop-file-utils libunique3-dev libcanberra-dev libsecret-dev
-	webkitgtk-dev libnotify-dev gobject-introspection-dev gtk-doc"
+	webkitgtk-dev libnotify-dev gobject-introspection-dev gtk-doc
+	paxctl"
 
 install=""
 subpackages="$pkgname-lang"
@@ -44,6 +45,10 @@ build() {
 package() {
 	cd "$_builddir"
 	make DESTDIR="$pkgdir" install || return 1
+
+	# webkit JIT has problems with hardened kernel
+	paxctl -c -m "$pkgdir"/usr/bin/geary || return 1
+
 	rm -f "$pkgdir"/usr/lib/*.la
 }