Currently, whonixcheck and sdwdate don't work with a kernel patched with grsecurity. This is because of two problems:
- /usr/bin/python2.7 is not labelled with user.pax.flags='E'
- cffi tries to create rwx pages
The first is easy to fix, just setfattr -n user.pax.flags -v E /usr/bin/python2.7
The second requires a patch¹. Given that Whonix uses Debian stable, I'm guessing that it will take a Very Long Time Indeed until a working release ends up in Whonix without preemptive action.