7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

@@ -219,11 +219,11 @@
 
 
 const struct systable systable[] = {
 { NULL,         8, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX},
 {"_exit",       1, DEC, NOV, DEC},                              /*   1 */
-{ NULL,         8, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX, HEX},
+{"psecflags",   3, DEC, NOV, HEX, PSFW, PSDLT},                 /*   2 */
 {"read",        3, DEC, NOV, DEC, IOB, UNS},                    /*   3 */
 {"write",       3, DEC, NOV, DEC, IOB, UNS},                    /*   4 */
 {"open",        3, DEC, NOV, STG, OPN, OCT},                    /*   5 */
 {"close",       1, DEC, NOV, DEC},                              /*   6 */
 {"linkat",      5, DEC, NOV, ATC, STG, ATC, STG, SNF},          /*   7 */