Gentoo: ATi binary driver vs. grsecurity

[Tommy]

Hi,

I have problem with Ati binary driver on my Gentoo ~x86 (hardened gentoo kernel)
On clean/vanilla kernel everythinkg works ok, but on 2.6.28-hardened (vanilla + grsecurity)
I`m always getting black screen and absolute no error messages in xorg.log or by ng-syslog.

Can U help me find option in grsecurity or PaX, that blocks Ati binary driver ?

ps.
I have "kmem restrictions" off

I`m using:
Ati-drivers-8.561
gentoo-hardened-2.6.28 (grsecurity 2.1.12)
xorg-server-1.5.3-r1

Edit: Now I`m runing only grsecurity without PaX and Ati drivers work fine.

[PaX Team]

Can U help me find option in grsecurity or PaX, that blocks Ati binary driver ?

it's KERNEXEC and UDEREF that trigger two separate bugs in the binary ATI drivers. the first one can be fixed by a binary patch to the driver, but the other one cannot and it may even be security related.