As I described at http://bugs.gentoo.org/show_bug.cgi?id=341889
, gdb is unusable for just-in-time debugging tasks, if CONFIG_GRKERNSEC_PROC_MEMMAP was chosen during Kernel configuration and RANDMAP was not disabled for the target program going to be debugged. gdb uses /proc/<pid>/auxv for module load addresses. Whithout that information, gdb is unable to display a symbolic backtrace, at least on a Gentoo amd64 hardened system. I realize the conflict of objectives and think about how to solve it. Maybe just amend the documentation for make menuconfig item "Remove addresses from /proc/<pid>/[smaps|maps|stat]"? Or add an option for selectively allowing /proc/<pid>/auxv to be read under certain conditions?