7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 2344,2348 ****
--- 2344,2377 ----
                  returnstat = finish_open_tag(context);
  
          /* privilege: */
          return (pa_adr_string(context, returnstat, 1));
  }
+ 
+ /*
+  * -----------------------------------------------------------------------
+  * secflags_token()     : Process privilege token and display contents
+  * return codes         : -1 - error
+  *                      :  0 - successful
+  * NOTE: At the time of call, the secflags token id has been retrieved
+  *
+  * Format of secflags token:
+  *      secflags token id       adr_char
+  *      secflag set name        adr_string
+  *      secflags                adr_string
+  * -----------------------------------------------------------------------
+  */
+ int
+ secflags_token(pr_context_t *context)
+ {
+         int     returnstat;
+ 
+         /* Set name */
+         returnstat = process_tag(context, TAG_SETTYPE, 0, 0);
+ 
+         /* Done with attributes; force end of token open */
+         if (returnstat == 0)
+                 returnstat = finish_open_tag(context);
+ 
+         /* set */
+         return (pa_adr_string(context, returnstat, 1));
+ }