The Exec-Shield can no longer be managed via sysctl, it is enabled by default with no option to disable. In older systems the kernel.exec-shield key had a value of 1 to enable it and 0 to disable it. To know if your CPU support NX protection you could do