Besides the "S" option for malloc.conf and increasing kern.stackgap_random and
removing the wxallowed mount option, what else memory-related hardening
mechanism are in OpenBSD that can be turned on and it is not enabled by default?
Even options would be useful if we have to re-compile the kernel, if minimal
source code modification is needed.
Tried to get lists/ideas from grsecurity (if there is any, that is not already
used in OpenBSD), but it is hard when you are not a programmer.