I managed to get it working, by applying the skas-patch to the host 
(CONFIG_MODE_TT gives the segfault, and CONFIG_STATIC_LINK with skas doesn't 
link). My system (the host) is still running in nptl-mode but the guest isn't 
(it's known to not work ;)

> You have recompiled your system or enabled those options?
> Sorry, I forgot to finish the sentence. I have NPTL on my system, so that's 
> not the culprit. The hardened toolchain may be, I'll investigate on this.
It's ok, we're all just humans, ain't we? ;)

Heiko

-- 
* misc stuff
    http://user.cs.tu-berlin.de/~zuxez/

* public gpg-key
    http://user.cs.tu-berlin.de/~zuxez/pubkey.asc