7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 49,58 ****
--- 49,59 ----
           * to specify the real system call number.
           */
  
  #define SYS_syscall     0
  #define SYS_exit        1
+ #define SYS_psecflags   2
  #define SYS_read        3
  #define SYS_write       4
  #define SYS_open        5
  #define SYS_close       6
  #define SYS_linkat      7