7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 60,69 ****
--- 60,70 ----
  $(i386_ONLY)file path=usr/bin/$(ARCH32)/pmap mode=0555
  $(i386_ONLY)file path=usr/bin/$(ARCH32)/ppgsz mode=0555
  $(i386_ONLY)file path=usr/bin/$(ARCH32)/ppriv mode=0555
  $(i386_ONLY)file path=usr/bin/$(ARCH32)/preap mode=0555
  $(i386_ONLY)file path=usr/bin/$(ARCH32)/prun mode=0555
+ $(i386_ONLY)file path=usr/bin/$(ARCH32)/psecflags mode=0555
  $(i386_ONLY)file path=usr/bin/$(ARCH32)/psig mode=0555
  $(i386_ONLY)file path=usr/bin/$(ARCH32)/pstack mode=0555
  $(i386_ONLY)file path=usr/bin/$(ARCH32)/pstop mode=0555
  $(i386_ONLY)file path=usr/bin/$(ARCH32)/ptime mode=0555
  $(i386_ONLY)file path=usr/bin/$(ARCH32)/ptree mode=0555
*** 80,89 ****
--- 81,91 ----
  file path=usr/bin/$(ARCH64)/pmap mode=0555
  file path=usr/bin/$(ARCH64)/ppgsz mode=0555
  file path=usr/bin/$(ARCH64)/ppriv mode=0555
  file path=usr/bin/$(ARCH64)/preap mode=0555
  file path=usr/bin/$(ARCH64)/prun mode=0555
+ file path=usr/bin/$(ARCH64)/psecflags mode=0555
  file path=usr/bin/$(ARCH64)/psig mode=0555
  file path=usr/bin/$(ARCH64)/pstack mode=0555
  file path=usr/bin/$(ARCH64)/pstop mode=0555
  file path=usr/bin/$(ARCH64)/ptime mode=0555
  file path=usr/bin/$(ARCH64)/ptree mode=0555
*** 193,202 ****
--- 195,205 ----
  file path=usr/share/man/man1/pmadvise.1
  file path=usr/share/man/man1/pmap.1
  file path=usr/share/man/man1/ppgsz.1
  file path=usr/share/man/man1/ppriv.1
  file path=usr/share/man/man1/preap.1
+ file path=usr/share/man/man1/psecflags.1
  file path=usr/share/man/man1/ptree.1
  file path=usr/share/man/man1/sdiff.1
  file path=usr/share/man/man1/sort.1
  file path=usr/share/man/man1/spell.1
  file path=usr/share/man/man1/split.1
*** 225,234 ****
--- 228,238 ----
  hardlink path=usr/bin/pmap target=../../usr/lib/isaexec
  hardlink path=usr/bin/ppgsz target=../../usr/lib/isaexec
  hardlink path=usr/bin/ppriv target=../../usr/lib/isaexec
  hardlink path=usr/bin/preap target=../../usr/lib/isaexec
  hardlink path=usr/bin/prun target=../../usr/lib/isaexec
+ hardlink path=usr/bin/psecflags target=../../usr/lib/isaexec
  hardlink path=usr/bin/psig target=../../usr/lib/isaexec
  hardlink path=usr/bin/pstack target=../../usr/lib/isaexec
  hardlink path=usr/bin/pstop target=../../usr/lib/isaexec
  hardlink path=usr/bin/ptime target=../../usr/lib/isaexec
  hardlink path=usr/bin/ptree target=../../usr/lib/isaexec