diff --git a/sys/conf/NOTES b/sys/conf/NOTES
index 22103606495..428bb52b31a 100644
--- a/sys/conf/NOTES
+++ b/sys/conf/NOTES
@@ -723,6 +723,14 @@ options 	P1003_1B
 options 	_KPOSIX_PRIORITY_SCHEDULING
 options 	_KPOSIX_VERSION=199309L
 
+
+#####################################################################
+# SECURITY POLICY PARAMETERS
+
+# Support for Mandatory Access Control (MAC)
+#options 	MAC
+#options 	MAC_NONE		# Statically link mac_none policy
+
 
 #####################################################################
 # CLOCK OPTIONS
diff --git a/sys/conf/options b/sys/conf/options
index 78689b125e9..273eb08bbfd 100644
--- a/sys/conf/options
+++ b/sys/conf/options
@@ -120,7 +120,12 @@ P1003_1B			opt_posix.h
 _KPOSIX_PRIORITY_SCHEDULING	opt_posix.h
 _KPOSIX_VERSION			opt_posix.h
 
-# TrustedBSD and POSIX.1e Kernel Options
+#####################################################################
+# SECURITY POLICY PARAMETERS
+
+# Support for Mandatory Access Control (MAC)
+MAC		opt_mac.h
+MAC_NONE	opt_dontuse.h
 
 # Do we want the config file compiled into the kernel?
 INCLUDE_CONFIG_FILE	opt_config.h