grsecurity forums

current grsec requires to list all hidden directories and files with mark "h",
if some directory is forgotten it remains readable, which can be big security hole
It would be more secure if all directories and files would be hidden by default except listed ones
example:
/lib64 with mark "r" - directory is readable, but its subdirectories are hidden
/usr/lib64 with marks "Rr" - directory and its subdirectories are readable