[grsec] PAX_REFCOUNT doesn't work

[pageexec at freemail.hu]

On 1 Sep 2008 at 19:05, Carlos Carvalho wrote:

> I tried the new PAX_REFCOUNT in our main server. After some hours of
> operation the dns server crashed and wouldn't restart, some firefox
> processes were stuck in D state and nfs didn't answer any more. I
> removed this option in the kernel and the machine is fine after 7
> hours.
> 
> If you need more details just ask. I'm not sure which info would be
> useful.

could you check your kernel logs for any possibly related messages
(oops or a direct report from PaX)?