I used it on several multi-purpose machines, no desktop through. I just patched the stock Ubuntu kernel¹. If you enable pax you have to watch out for applicatio

I used it on several multi-purpose machines, no desktop through. I just patched the stock Ubuntu kernel¹. If you enable pax you have to watch out for applications that are incompatible with it. GRUB, Java, mod_python broke out of the box, but you can change the flags for pax on a per binary basis. It's probably useful to write some apt rules to apply the changes on every update of the program. Otherwise there where no problems. Using RBAC and configuring it on the other hand is a more difficult process. 1: http://compilefailure.blogspot.de/2011/02/grsecurity-patched-ubuntu-server-lts.html http://compilefailure.blogspot.de/2011/02/grsecurity-patched...