===== RG: r/grsecurity =====
paxctl: New package

A tool for controlling PaX flags on a per binary basis.
gradm: New package

grsecurity's RBAC administration utility.
spl: Fix compilation with grsecurity's constify plugin and kernels < 3.8
qimageblitz: Mark stack as non-executable (patch taken from Gentoo)

This allows applications such as okular and kolourpaint to run in
grsecurity kernels, which disallow executable stacks by default.
firefox: Add support for grsecurity
chromium: Add support for grsecurity
polkit: Add support for grsecurity
llvm: Add support for grsecurity
gcc: Add support for grsecurity
oraclejdk7: Add support for grsecurity
spidermonkey: Add support for grsecurity
gstreamer: Add support for grsecurity
grub: Add support for grsecurity
mesa-noglu: Add support for grsecurity
===== RG: r/xxx-grsec-wip =====
XXX grsecurity workaround - don't set kptr_restrict sysctl
XXX systemd: disable systemd-inhibit due to grsecurity
XXX go: Disable race tests due to grsec incompatibility
XXX libffi: Temporarily disable tests due to grsecurity