grsecurity2 does not allow block device reads (e.g. cdrom)