W^X transition: Sigtramp separation First we move the signal trampoline away from being the top page of the stack (to a per-process random address) The stack becomes non-executable But perhaps we should look at what shared libraries do, next..