7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 24,35 ****
   */
  
  #ifndef _SYS_TSOL_PRIV_H
  #define _SYS_TSOL_PRIV_H
  
- #pragma ident   "%Z%%M% %I%     %E% SMI"
- 
  #include <sys/priv.h>
  
  #ifdef  __cplusplus
  extern "C" {
  #endif
--- 24,33 ----
*** 39,48 ****
--- 37,49 ----
          PRIV_FORCED
  } priv_ftype_t;
  
  /*
   * Privilege macros.
+  *
+  * These names are here for compatibility reasons, and thus do not match
+  * priv_impl.h
   */
  
  /*
   * PRIV_ASSERT(a, b) setst.privilege "b" in privilege set "a".
   */