[grsec] pax and kaspersky kavscanner

[pageexec at freemail.hu]

> As told i am confused about the documentation on grsecurity, how do i 
> correctly disable the mprotect feature using the policy file? The 
> documentation says "M" ist the right flag, but in the sample policy "M" 
> means something completly different, it seems the documentation is 
> outdated.

there's an M subject flag and an M object flag as well, you have
to use the subject flag (which you did, based on your previous mail).
why it doesn't work then, i can't tell, maybe you could take a look
at kav's /proc/pid/status file and tell us what the PaX line says,
it should show that MPROTECT is actually off. if it is, then kav is
dying for some other reason, error logs/messages/etc would be helpful.