7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 404,413 ****
--- 404,414 ----
          APlist          *ofl_maptext;   /* mapfile added text sections */
          APlist          *ofl_mapdata;   /* mapfile added data sections */
          avl_tree_t      *ofl_wrap;      /* -z wrap symbols */
          ofl_guideflag_t ofl_guideflags; /* -z guide flags */
          APlist          *ofl_assdeflib; /* -z assert-deflib exceptions */
+         int             ofl_aslr;       /* -z aslr, -1 disable, 1 enable */
  };
  
  #define FLG_OF_DYNAMIC  0x00000001      /* generate dynamic output module */
  #define FLG_OF_STATIC   0x00000002      /* generate static output module */
  #define FLG_OF_EXEC     0x00000004      /* generate an executable */