OpenBSD Process Address Space - w/o PIE Executable at fixed load address Randomized mmap(2) Shared libs with random load address & order Randomize into beginning of mmap space then linear Random load order important too Heap largely unused i386 is different