PAX: Remove CAN_PIE in preparation for NO_PIE
PAX: Remove CAN_PIE in preparation for NO_PIE from /bin/sh

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX ASLR: Blacklist the applications that don't support being built as a position-independent executable

note: in hardened/10/aslr the PIE support enabled by default
PAX: blacklist clang and related binaries from PIE support

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX ASLR: make ASLR by default opt-out

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX ASLR: Lock the jail when initializing PAX per-jail PAX settings

style(9) and pax log by Oliver
PAX ASLR: Fix bug with pax_aslr_active()
added OPN-ASLR kernel config

HP 5310m kernel config

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>