7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 550,559 ****
--- 550,560 ----
  file path=lib/svc/manifest/system/keymap.xml group=sys mode=0444
  file path=lib/svc/manifest/system/logadm-upgrade.xml group=sys mode=0444
  file path=lib/svc/manifest/system/manifest-import.xml group=sys mode=0444
  file path=lib/svc/manifest/system/name-service-cache.xml group=sys mode=0444
  file path=lib/svc/manifest/system/pfexecd.xml group=sys mode=0444
+ file path=lib/svc/manifest/system/process-security.xml group=sys mode=0444
  file path=lib/svc/manifest/system/rbac.xml group=sys mode=0444
  file path=lib/svc/manifest/system/rmtmpfiles.xml group=sys mode=0444
  file path=lib/svc/manifest/system/sac.xml group=sys mode=0444
  file path=lib/svc/manifest/system/svc/global.xml group=sys mode=0444
  file path=lib/svc/manifest/system/svc/restarter.xml group=sys mode=0444
*** 1082,1091 ****
--- 1083,1093 ----
  file path=usr/lib/help/auths/locale/C/SmfValueInetd.html
  file path=usr/lib/help/auths/locale/C/SmfValueMDNS.html
  file path=usr/lib/help/auths/locale/C/SmfValueNADD.html
  file path=usr/lib/help/auths/locale/C/SmfValueNDMP.html
  file path=usr/lib/help/auths/locale/C/SmfValueNWAM.html
+ file path=usr/lib/help/auths/locale/C/SmfValueProcSec.html
  file path=usr/lib/help/auths/locale/C/SmfValueRouting.html
  file path=usr/lib/help/auths/locale/C/SmfValueSMB.html
  file path=usr/lib/help/auths/locale/C/SmfValueVscan.html
  file path=usr/lib/help/auths/locale/C/SmfValueVt.html
  file path=usr/lib/help/auths/locale/C/SmfVscanStates.html