Enable various PaX features (PAX) [N/y/?] (NEW) y

lll-project (llvm-linux with clang)

$ make CC=clang HOSTCC=clang oldconfig
  HOSTCC  scripts/basic/fixdep
  HOSTCC  scripts/basic/docproc
make[1]: Für das Ziel »/home/sd/src/lll-project/kernel/Makefile.config« ist nichts zu tun.
  HOSTCC  scripts/kconfig/conf.o
  HOSTCC  scripts/kconfig/kxgettext.o
  SHIPPED scripts/kconfig/zconf.tab.c
  SHIPPED scripts/kconfig/lex.zconf.c
  SHIPPED scripts/kconfig/zconf.hash.c
  HOSTCC  scripts/kconfig/zconf.tab.o
  HOSTLD  scripts/kconfig/conf
scripts/kconfig/conf --oldconfig Kconfig
*
* Restart config...
*
*
* PaX
*
Enable various PaX features (PAX) [N/y/?] (NEW) y
  *
  * PaX Control
  *
  Support soft mode (PAX_SOFTMODE) [N/y/?] (NEW) 
  Use legacy ELF header marking (PAX_EI_PAX) [N/y/?] (NEW) 
  Use ELF program header marking (PAX_PT_PAX_FLAGS) [N/y/?] (NEW) 
  MAC system integration
  > 1. none (PAX_NO_ACL_FLAGS) (NEW)
    2. direct (PAX_HAVE_ACL_FLAGS) (NEW)
    3. hook (PAX_HOOK_ACL_FLAGS) (NEW)
  choice[1-3?]: 1
  *
  * Non-executable pages
  *
  *
  * Address Space Layout Randomization
  *
*
* Miscellaneous hardening features
*
Sanitize all freed memory (PAX_MEMORY_SANITIZE) [N/y/?] (NEW) 
Prevent invalid userland pointer dereference (PAX_MEMORY_UDEREF) [N/y/?] (NEW) 
Prevent various kernel object reference counter overflows (PAX_REFCOUNT) [N/y/?] (NEW) 
Bounds check heap object copies between kernel and userland (PAX_USERCOPY) [N/y/?] (NEW) 
#
# configuration written to .config
#