7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (aslr)
7031 noexec_user_stack should be a secflag
7032 want a means to forbid mappings around NULL.

*** 150,159 ****
--- 150,160 ----
          PR_PRIV,                /* /proc/<pid>/priv                     */
          PR_PATHDIR,             /* /proc/<pid>/path                     */
          PR_PATH,                /* /proc/<pid>/path/xxx                 */
          PR_CTDIR,               /* /proc/<pid>/contracts                */
          PR_CT,                  /* /proc/<pid>/contracts/<ctid>         */
+         PR_SECFLAGS,            /* /proc/<pid>/secflags                 */
          PR_PIDFILE,             /* old process file                     */
          PR_LWPIDFILE,           /* old lwp file                         */
          PR_OPAGEDATA,           /* old page data file                   */
          PR_NFILES               /* number of /proc node types           */
  } prnodetype_t;