Binary_protection_schemes-1.00-prerelease.tar.gz
Pseudo-PaX-in-userland, you could use custom CS descriptors to make split EIP / VM mappings.