.rodata Readonly strings and pointers were stored in .text segment But this is ELF, not a.out So move them out to their own segment These are no longer PROT_EXEC now Attacker cannot look for instruction sequences to use in static data. But.. we need PROT_EXEC to work. No overhead.