For the curious - this is all on by default:

ASLR:

• Stack Randomization

• Heap Randomization

• Library Randomization

• Binary Randomization

Page Protections:

• Stack Execution off by Default

• Heap Execution off by Default

• Null Page is Not Mapped

• Stack Cookies/Canaries

• Rodata no execute

• Text no write

• Single Process

• No Users

• No Shell