As a first step in getting a hardened system for the efika I've applied some patches from the hardened-patches collection to the efika-sources from the efika overlay. As a result I now have a kernel running on the efika with pax and grsec enhancements.

I'll see if I can get humpback to include those patches in the efika-sources. If not, I'll put up an alternative efika-patches tarball and some documentation. Once the efika patches are included in the mainline kernel, simply using hardened-sources should suffice.