7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 2530,2539 ****
--- 2530,2546 ----
                          dyn++;
                          dyn->d_tag = DT_SUNW_CAPCHAINENT;
                          dyn->d_un.d_val = shdr->sh_entsize;
                          dyn++;
                  }
+ 
+                 if (ofl->ofl_aslr != 0) {
+                         dyn->d_tag = DT_SUNW_ASLR;
+                         dyn->d_un.d_val = (ofl->ofl_aslr == 1);
+                         dyn++;
+                 }
+ 
                  if (flags & FLG_OF_SYMBOLIC) {
                          dyn->d_tag = DT_SYMBOLIC;
                          dyn->d_un.d_val = 0;
                          dyn++;
                  }