7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 176,185 ****
--- 176,188 ----
  @ MSG_DT_SUNW_CAPCHAINENT_CFNP          "SUNW_CAPCHAINENT"
  @ MSG_DT_SUNW_CAPCHAINENT_NF            "sunw_capchainent"
  @ MSG_DT_SUNW_CAPCHAINSZ_CF     "DT_SUNW_CAPCHAINSZ"            # 0x6000001d
  @ MSG_DT_SUNW_CAPCHAINSZ_CFNP           "SUNW_CAPCHAINSZ"
  @ MSG_DT_SUNW_CAPCHAINSZ_NF             "sunw_capchainsz"
+ @ MSG_DT_SUNW_ASLR_CF           "DT_SUNW_ASLR"                  # 0x60000023
+ @ MSG_DT_SUNW_ASLR_CFNP                 "SUNW_ASLR"
+ @ MSG_DT_SUNW_ASLR_NF                   "sunw_aslr"
  
  @ MSG_DT_GNU_PRELINKED_CF       "DT_GNU_PRELINKED"              # 0x6ffffdf5
  @ MSG_DT_GNU_PRELINKED_CFNP             "GNU_PRELINKED"
  @ MSG_DT_GNU_PRELINKED_NF               "gnu_prelinked"
  @ MSG_DT_GNU_CONFLICTSZ_CF      "DT_GNU_CONFLICTSZ"             # 0x6ffffdf6