Hacker News Reader

Link directly to the comment:

https://www.digitalocean.com/community/tutorials/an-introduc...

And here is the referenced email with a bit of context:

http://osdir.com/ml/general/2014-02/msg44493.html

He's actually talking about the SELinux/"RBAC in general" approach. His only criticism of Grsecurity is that it's not in the mainline and therefore not as effective as it could be.

Substitute "Untrusted user" for "possibly buggy server code" and you will see why Grsecurity's approach can have value in single-user systems.