This is because grsec is proprietary and the state of SELinux policies is very poor. Redhat puts a lot of effort into maintaining their SELinux policy and is th

This is because grsec is proprietary and the state of SELinux policies is very poor. Redhat puts a lot of effort into maintaining their SELinux policy and is the only one that doesn't have too much bugs. PaX should be included, but afaik a lot of what PaX has been doing over the years is being/has been included in mainline.