Set SYMLINKOWN_GID to group www

group www, gid 8

Signed-off-by: David Sterba <dsterba@suse.cz>
Add grsec-remove-protected-paths.patch

Signed-off-by: David Sterba <dsterba@suse.cz>
Set CONFIG_PAX_EMUTRAMP

"From: Anthony G. Basile <blueness@gentoo.org>

PAX_EMUTRAMP is needed for libffi to avoid RWX mmap-ings using PaX
emulation of trampolines.
We default PAX_EMUTRAMP='y' since almost all hardened users will want
this.

See bug:
 http://bugs.gentoo.org/show_bug.cgi?id=329499
 http://bugs.gentoo.org/show_bug.cgi?id=457194
"

Signed-off-by: David Sterba <dsterba@suse.cz>