uts: Allow for address space randomisation.
Randomise the base addresses of shared objects, non-fixed mappings, the
stack and the heap.  Introduce a service, svc:/system/process-security,
and a tool psecflags(1) to control and observe it

*** 554,563 ****
--- 554,574 ----
  .RE
  
  .sp
  .ne 2
  .na
+ \fB\PRIV_PROC_SECFLAGS\fR
+ .ad
+ .sp .6
+ .RS 4n
+ Allow a process to manipulate the secflags of processes (subject to,
+ additionally, the ability to signal that process)
+ .RE
+ 
+ .sp
+ .ne 2
+ .na
  \fB\fBPRIV_PROC_SESSION\fR\fR
  .ad
  .sp .6
  .RS 4n
  Allow a process to send signals or trace processes outside its session.