I don&#x27;t think I buy this argument; at least, I don&#x27;t think grsecurity backs up this argument.<p>grsecurity is a big collection of a bunch of different techniques. It isn&#x27;t a total rethink of the Linux kernel, it is a bunch of patches spread over a large surface area. Some of the changes are far-reaching, yes, but even so, each of the techniques represented in grsecurity <i>could</i> be broken into independent patches. So, why haven&#x27;t they been? (I honestly don&#x27;t know why. It&#x27;s not something I follow closely.)