7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

@@ -404,10 +404,11 @@
         APlist          *ofl_maptext;   /* mapfile added text sections */
         APlist          *ofl_mapdata;   /* mapfile added data sections */
         avl_tree_t      *ofl_wrap;      /* -z wrap symbols */
         ofl_guideflag_t ofl_guideflags; /* -z guide flags */
         APlist          *ofl_assdeflib; /* -z assert-deflib exceptions */
+        int             ofl_aslr;       /* -z aslr, -1 disable, 1 enable */
 };
 
 #define FLG_OF_DYNAMIC  0x00000001      /* generate dynamic output module */
 #define FLG_OF_STATIC   0x00000002      /* generate static output module */
 #define FLG_OF_EXEC     0x00000004      /* generate an executable */