Attached is a git patch (I hope I did it right - still not used to
working with git) for linux-virt-grsec which updates the kernel
to 3.4.7 and the grsecurity patch to the 201208011850 version.

Either the kernel upgrade or grsecurity patch appears to fix the
CONFIG_TRANSPARENT_HUGEPAGES vs. Xen bug, so it's turned back on
in the config file.  A recent PAX update included in grsecurity
adds a new CONFIG_PAX_LATENT_ENTROPY option which is left off.

-dean takemori