grsecurity: Update to 2.9.1-3.2.52-201311021628
grsecurity: Add patch for 3.11.x kernels
paxctl: New package

A tool for controlling PaX flags on a per binary basis.
gradm: New package

grsecurity's RBAC administration utility.
firefox: Add support for grsecurity
chromium: Add support for grsecurity
Make XFS kernel config options optional
vim: add config option to generate vimrc
Add nixopsUnstable package
XXX Workaround for grsecurity
flashplayer: Update to 11.2.202.310 (fixes 4 critical security vulnerabilities)

Fixes CVE-2013-3361, CVE-2013-3362, CVE-2013-3363 and CVE-2013-5324.
qimageblitz: Mark stack as non-executable (patch taken from Gentoo)

This allows applications such as okular and kolourpaint to run in
grsecurity kernels, which disallow executable stacks by default.