7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

          --- old/usr/src/cmd/sgs/elfdump/common/gen_layout_obj.c
          +++ new/usr/src/cmd/sgs/elfdump/common/gen_layout_obj.c

   1    1  /*
   2    2   * This file and its contents are supplied under the terms of the
   3    3   * Common Development and Distribution License ("CDDL"), version 1.0.
   4    4   * You may only use this file in accordance with the terms of version
   5    5   * 1.0 of the CDDL.
   6    6   *
   7    7   * A full copy of the text of the CDDL should have accompanied this
   8    8   * source.  A copy of the CDDL is also available via the Internet at
   9    9   * http://www.illumos.org/license/CDDL.
  10   10   */
  11   11  
  12   12  /*
  13   13   * Copyright 2015 Nexenta Systems, Inc.  All rights reserved.
  14   14   */
  15   15  
  16   16  /*
  17   17   * A little program who's only purpose is to get all the
  18   18   * CTF type information we want into an object.
  19   19   */

  20   20  
  21   21  #include <sys/types.h>
  22   22  #include <sys/stat.h>
  23   23  #include <sys/sysmacros.h>
  24   24  #include <sys/corectl.h>
  25   25  #define _STRUCTURED_PROC        1
  26   26  #include <sys/procfs.h>
  27   27  #include <sys/auxv.h>
  28   28  #include <sys/old_procfs.h>
  29   29  #include <sys/utsname.h>
       30 +#include <sys/secflags.h>
  30   31  
  31   32  /* prgregset_t is a define on intel */
  32   33  #ifdef prgregset_t
  33   34  typedef prgregset_t
  34   35  #undef prgregset_t
  35   36      prgregset_t;
  36   37  #endif
  37   38  
  38   39  /* instantiate the types for CTF */
  39   40  auxv_t auxv;

  40   41  prgregset_t prgregset;
  41   42  lwpstatus_t lwpstatus;
  42   43  pstatus_t pstatus;
  43   44  prstatus_t prstatus;
  44   45  psinfo_t psinfo;
  45   46  prpsinfo_t prpsinfo;
  46   47  lwpsinfo_t lwpsinfo;
  47   48  prcred_t prcred;
  48   49  prpriv_t prpriv;

  49   50  priv_impl_info_t priv_impl;
  50   51  fltset_t fltset;
  51   52  siginfo_t siginfo;
  52   53  sigset_t sigset;
  53   54  struct sigaction sigact;
  54   55  stack_t stack;
  55   56  sysset_t sysset;
  56   57  timestruc_t ts;
  57   58  struct utsname uts;
  58   59  prfdinfo_t ptfd;
       60 +prsecflags_t psf;
    

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX