7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

@@ -2530,10 +2530,17 @@
                         dyn++;
                         dyn->d_tag = DT_SUNW_CAPCHAINENT;
                         dyn->d_un.d_val = shdr->sh_entsize;
                         dyn++;
                 }
+
+                if (ofl->ofl_aslr != 0) {
+                        dyn->d_tag = DT_SUNW_ASLR;
+                        dyn->d_un.d_val = (ofl->ofl_aslr == 1);
+                        dyn++;
+                }
+
                 if (flags & FLG_OF_SYMBOLIC) {
                         dyn->d_tag = DT_SYMBOLIC;
                         dyn->d_un.d_val = 0;
                         dyn++;
                 }