7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

@@ -550,10 +550,11 @@
 file path=lib/svc/manifest/system/keymap.xml group=sys mode=0444
 file path=lib/svc/manifest/system/logadm-upgrade.xml group=sys mode=0444
 file path=lib/svc/manifest/system/manifest-import.xml group=sys mode=0444
 file path=lib/svc/manifest/system/name-service-cache.xml group=sys mode=0444
 file path=lib/svc/manifest/system/pfexecd.xml group=sys mode=0444
+file path=lib/svc/manifest/system/process-security.xml group=sys mode=0444
 file path=lib/svc/manifest/system/rbac.xml group=sys mode=0444
 file path=lib/svc/manifest/system/rmtmpfiles.xml group=sys mode=0444
 file path=lib/svc/manifest/system/sac.xml group=sys mode=0444
 file path=lib/svc/manifest/system/svc/global.xml group=sys mode=0444
 file path=lib/svc/manifest/system/svc/restarter.xml group=sys mode=0444

@@ -1082,10 +1083,11 @@
 file path=usr/lib/help/auths/locale/C/SmfValueInetd.html
 file path=usr/lib/help/auths/locale/C/SmfValueMDNS.html
 file path=usr/lib/help/auths/locale/C/SmfValueNADD.html
 file path=usr/lib/help/auths/locale/C/SmfValueNDMP.html
 file path=usr/lib/help/auths/locale/C/SmfValueNWAM.html
+file path=usr/lib/help/auths/locale/C/SmfValueProcSec.html
 file path=usr/lib/help/auths/locale/C/SmfValueRouting.html
 file path=usr/lib/help/auths/locale/C/SmfValueSMB.html
 file path=usr/lib/help/auths/locale/C/SmfValueVscan.html
 file path=usr/lib/help/auths/locale/C/SmfValueVt.html
 file path=usr/lib/help/auths/locale/C/SmfVscanStates.html