https://pax.grsecurity.net/docs/PaXTeam-H2HC15-RAP-RIP-ROP.p...
(Not that you’ll be able to actually use RAP, as they’re only releasing it to commercial customers, but the description of it is worth checking out.)