PAX: hook in pax_init_prison at kern_jail_set

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX ASLR: simplify jail handling

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX: added PAX_SYSCTLS kernel option

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX: check proc->p_ucred

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX SEGVGUARD: simplify jail handling

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX ASLR: make security.pax.aslr sysctls optional

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX SEGVGUARD: refactor

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>
PAX: show pax settings in dmesg, and validate some value

Signed-off-by: Oliver Pinter <oliver.pntr@gmail.com>