PaX flags for current version of 32bit glibc (for steam).
Flags from Parabola GNU/Linux-libre.
Seperate config for browsers (as in OpenSUSE).
MPROTECT and RANDMMAP off for opera binaries.