7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

@@ -49,10 +49,11 @@
          * to specify the real system call number.
          */
 
 #define SYS_syscall     0
 #define SYS_exit        1
+#define SYS_psecflags   2
 #define SYS_read        3
 #define SYS_write       4
 #define SYS_open        5
 #define SYS_close       6
 #define SYS_linkat      7