7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 219,229 ****
  
  
  const struct systable systable[] = {
  { NULL,         8, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX},
  {"_exit",       1, DEC, NOV, DEC},                              /*   1 */
! { NULL,         8, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX},
  {"read",        3, DEC, NOV, DEC, IOB, UNS},                    /*   3 */
  {"write",       3, DEC, NOV, DEC, IOB, UNS},                    /*   4 */
  {"open",        3, DEC, NOV, STG, OPN, OCT},                    /*   5 */
  {"close",       1, DEC, NOV, DEC},                              /*   6 */
  {"linkat",      5, DEC, NOV, ATC, STG, ATC, STG, SNF},          /*   7 */
--- 219,229 ----
  
  
  const struct systable systable[] = {
  { NULL,         8, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX},
  {"_exit",       1, DEC, NOV, DEC},                              /*   1 */
! {"psecflags",   3, DEC, NOV, HEX, PSFW, PSDLT},                 /*   2 */
  {"read",        3, DEC, NOV, DEC, IOB, UNS},                    /*   3 */
  {"write",       3, DEC, NOV, DEC, IOB, UNS},                    /*   4 */
  {"open",        3, DEC, NOV, STG, OPN, OCT},                    /*   5 */
  {"close",       1, DEC, NOV, DEC},                              /*   6 */
  {"linkat",      5, DEC, NOV, ATC, STG, ATC, STG, SNF},          /*   7 */