I am using Mono with Grsec kernel patch on Debian Jessie, Mono does not work as default. I have to manually configure Grsec to disable mprotect using:
paxctl -v /usr/bin/mono-sgen
paxctl -m /usr/bin/mono-sgen
after every time I upgraded mono-sgen binary.
Is it possible to disable mprotect if grsec is enabled after package installed?