chpax may be used to control PaX flags on a per-binary basis. PaX is a set of kernel security patches to enhance a system's security. It is part of grsecurity (kernel-patch-2.4-grsecurity), among others. Please note chpax is DEPRECATED upstream, and only works with PaX patches released between 2003.02.03 and 2004.02.04. Users are encouraged switching to paxctl.