From: Christian Heim <phreak@gentoo.org>

Prevent users from selecting PAX_EMUTRAMP unless the architecture is
either PARISC or PPC32. Enabling it on other architectures can cause
serious problems, most notably sandbox errors. See bug 206678.

Acked-by: Kerin Millar <kerframil@gmail.com>

--- a/security/Kconfig	2008-03-30 17:42:44.000000000 +0100
+++ b/security/Kconfig	2008-03-30 17:42:29.000000000 +0100
@@ -154,7 +154,8 @@
 
 config PAX_EMUTRAMP
 	bool "Emulate trampolines" if (PAX_PAGEEXEC || PAX_SEGMEXEC) && (PARISC || PPC32 || X86)
-	default y if PARISC || PPC32
+	depends on PARISC || PPC32
+	default y
 	help
 	  There are some programs and libraries that for one reason or
 	  another attempt to execute special small code snippets from