Check this out: http://kerneltrap.org/node/4545/
You find the patches here: http://www.acm.cs.rpi.edu/~dilinger/patches/
It would be awesome if this patch-set would work together with grsecurity.
(I didn't have a chance yet to actually try it out).
Heiko