For the curious - this is all on by default:
ASLR:
-
Stack Randomization
-
Heap Randomization
-
Library Randomization
-
Binary Randomization
Page Protections:
-
Stack Execution off by Default
-
Heap Execution off by Default
-
Null Page is Not Mapped
-
Stack Cookies/Canaries
-
Rodata no execute
-
Text no write
-
Single Process
-
No Users
-
No Shell