[grsec] pax and kaspersky kavscanner

[pageexec at freemail.hu]

> But i think it could be nice to have a config file where i can tell which 
> executables are unclean and where pax should drop some of it checking 
> features or does that open to many holes in the pax system? Maybe as an 
> compile-time option like softmode.

what you are describing is a sort of access control for the file
system and that's what grsecurity/RSBAC/SElinux are for, it's a
very intentional choice on my part to not do this in PaX itself.