Security
From Go-OS
In order to make 五OS as secure as possible, some common features will be built in the kernel from the very beginning.
NX Bit
As most (if not all) 64bits CPUs are supporting NX Bit, it will be used to avoid execution to reach places we don't want it to reach.
W^X
Enforce pages to be Writeable OR eXecutable, but never both. A page that was writeable cannot become executable.
Problems:
Address space layout randomization
Make stack and library positions random. Libs are compiled with -fPIC so we won't need anything weird (just one GOT table per process).
