<a href="http://felinemenace.org/~andrewg/grsec_acl_bypass/"></a>
(written ages ago)
Due to the way grsecurity's acl system operates in certain modes, it is possible to bypass / evade the acl system in certain circumstances. More information can be found in the rant/proof of concept/example code.