As per this conversation on irc: <spatz> phajdan-jr: btw, same with hardened useflag and -Dv8_use_snapshot=0 <phajdan-jr> spatz: that's more complicated <phajdan-jr> spatz: one can have hardened-sources running and not use the hardened profile <spatz> phajdan-jr: oh, the problem is the kernel? I see <phajdan-jr> spatz: if you _really_ want to get it in, you can write a patch for the build system <phajdan-jr> spatz: if you can get the right PaX marks for the mksnapshot binary, everything is going to be fine <phajdan-jr> spatz: I've tried once, but it got reverted because it broke build on Windows or something :~/ <phajdan-jr> spatz: so feel free to file a bug so I have it in my queue; I might try again when I have more time for some experiments
This is now fixed by detecting a pax-enabled kernel.