Hello. I wanted to put forward a thought that perhaps EVMS & GRSecurity should be made optional by the use of local use flags like the other options. I had all local use flags negated when emerging gentoo-sources-2.4.20-r4 but yet these patches were applied to kernel. I'd be curious to hear your thoughts on this point. Many thanks.
too hard to get patches to apply and also layout correctly. when compiling the kernel you get to choose whether you use grsecurity or evms during the config. or even things like systrace & ipvs. we just offer evms1.x versus 2.x and grsec is in there and is too intrusive to be easily droppped. nothing is forcing you to select any of the options you mention. Jay