fix dosbox to build with gcc 4.7.3 (lacks offsetof decl)
bump kernel and grsec to latest stable, 3.9.8
kernel: build headers after the kernel so grsec's assumptions hold