[grsec] PAX_REFCOUNT doesn't work

[Carlos Carvalho]

I tried the new PAX_REFCOUNT in our main server. After some hours of
operation the dns server crashed and wouldn't restart, some firefox
processes were stuck in D state and nfs didn't answer any more. I
removed this option in the kernel and the machine is fine after 7
hours.

If you need more details just ask. I'm not sure which info would be
useful.