Paxctld automatically sets appropriate PaX flags on binaries on the system using user extended attributes. The flags are maintained across any updates made to the binaries listed in the paxctld configuration file.