> > btw, i don't think pax_mprotect_enabled and pax_mprotect_global are updated
> > at all because you are using CTLFLAG_IMMEDIATE.
> 
> I thought you had to use CTLFLAG_IMMEDIATE if you wanted the value
> passed as qv to be used as the initial value...?

i don't think it works as you expected.  see sysctl_lookup().
you can just initialize the variables by normal C initializers.

YAMAMOTO Takashi