7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

@@ -288,10 +288,14 @@
 
 $(DTRACEOBJS:%=pics/%): $(SRC)/common/dtrace/$$(@F:.o=.c)
         $(COMPILE.c) -o $@ $(SRC)/common/dtrace/$(@F:.o=.c)
         $(POST_PROCESS_O)
 
+$(SECFLAGSOBJS:%=pics/%): $(SRC)/common/secflags/$$(@F:.o=.c)
+        $(COMPILE.c) -o $@ $(SRC)/common/secflags/$(@F:.o=.c)
+        $(POST_PROCESS_O)
+
 $(UNICODEOBJS:%=pics/%): $(SRC)/common/unicode/$$(@F:.o=.c)
         $(COMPILE.c) -o $@ $(SRC)/common/unicode/$(@F:.o=.c)
         $(POST_PROCESS_O)
 
 $(CHACHAOBJS:%=pics/%): $(SRC)/common/crypto/chacha/$$(@F:.o=.c)