7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 157,166 ****
--- 157,185 ----
          return (-1);
  }
  
  /*ARGSUSED*/
  static int
+ Psecflags_core(struct ps_prochandle *P, prsecflags_t **psf, void *data)
+ {
+         core_info_t *core = data;
+ 
+         if (core->core_secflags == NULL) {
+                 errno = ENODATA;
+                 return (-1);
+         }
+ 
+         if ((*psf = calloc(1, sizeof (prsecflags_t))) == NULL)
+                 return (-1);
+ 
+         (void) memcpy(*psf, core->core_secflags, sizeof (prsecflags_t));
+ 
+         return (0);
+ }
+ 
+ /*ARGSUSED*/
+ static int
  Ppriv_core(struct ps_prochandle *P, prpriv_t **pprv, void *data)
  {
          core_info_t *core = data;
  
          if (core->core_priv == NULL) {
*** 220,229 ****
--- 239,250 ----
                          __priv_free_info(core->core_privinfo);
                  if (core->core_ppii != NULL)
                          free(core->core_ppii);
                  if (core->core_zonename != NULL)
                          free(core->core_zonename);
+                 if (core->core_secflags != NULL)
+                         free(core->core_secflags);
  #ifdef __x86
                  if (core->core_ldt != NULL)
                          free(core->core_ldt);
  #endif
  
*** 306,315 ****
--- 327,337 ----
          .pop_psinfo     = Ppsinfo_core,
          .pop_fini       = Pfini_core,
          .pop_platform   = Pplatform_core,
          .pop_uname      = Puname_core,
          .pop_zonename   = Pzonename_core,
+         .pop_secflags   = Psecflags_core,
  #ifdef __x86
          .pop_ldt        = Pldt_core
  #endif
  };
  
*** 744,753 ****
--- 766,803 ----
  
          return (0);
  }
  
  static int
+ note_secflags(struct ps_prochandle *P, size_t nbytes)
+ {
+         core_info_t *core = P->data;
+         prsecflags_t *psf;
+ 
+         if (core->core_secflags != NULL)
+                 return (0);     /* Already seen */
+ 
+         if (sizeof (*psf) != nbytes) {
+                 dprintf("Pgrab_core: NT_SECFLAGS changed size."
+                     "  Need to handle a version change?\n");
+                 return (-1);
+         }
+ 
+         if (nbytes != 0 && ((psf = malloc(nbytes)) != NULL)) {
+                 if (read(P->asfd, psf, nbytes) != nbytes) {
+                         dprintf("Pgrab_core: failed to read NT_SECFLAGS\n");
+                         free(psf);
+                         return (-1);
+                 }
+ 
+                 core->core_secflags = psf;
+         }
+ 
+         return (0);
+ }
+ 
+ static int
  note_utsname(struct ps_prochandle *P, size_t nbytes)
  {
          core_info_t *core = P->data;
          size_t ubytes = sizeof (struct utsname);
          struct utsname *utsp;
*** 1178,1187 ****
--- 1228,1238 ----
          note_priv_info,         /* 19   NT_PRPRIVINFO           */
          note_content,           /* 20   NT_CONTENT              */
          note_zonename,          /* 21   NT_ZONENAME             */
          note_fdinfo,            /* 22   NT_FDINFO               */
          note_spymaster,         /* 23   NT_SPYMASTER            */
+         note_secflags,          /* 24   NT_SECFLAGS             */
  };
  
  static void
  core_report_mapping(struct ps_prochandle *P, GElf_Phdr *php)
  {