Attached is a git patch (I hope I did it right - still not used to
working with git) for linux-virt-grsec which updates the kernel
to 3.4.7 and the grsecurity patch to the 201208011850 version.
Either the kernel upgrade or grsecurity patch appears to fix the
CONFIG_TRANSPARENT_HUGEPAGES vs. Xen bug, so it's turned back on
in the config file. A recent PAX update included in grsecurity
adds a new CONFIG_PAX_LATENT_ENTROPY option which is left off.