I will try another distro I guess.
Actually, tjh has a good point: viewtopic.php?f=3&t=2144#p8957
If you have some time to experiment, but wish to avoid most of the kernel (mis)configuration, I would suggest you to install Gentoo and try it's genkernel tool to compile hardened-sources-2.6.28-rX from portage (you can use genkernel with '--menuconfig' option to set up the Grsecurity and PaX manually). And as soon as you'll get well-configured and working 2.6.28-hardened-rX kernel with PaX and Grsecurity, making 2.6.29.X-grsec to work with mostly the same .config should be easy on Gentoo and another distros as well.