Hi Dan, It'd be a tough work to break up the features of PaX/Grsec and push them into upstream, separately. The fact is vanilla kernel community don't care about mitigation. People who runs GNU/Linux