From 12e9f256e37013341bd322e0f27eeeb9d5032656 Mon Sep 17 00:00:00 2001
From: Robert Watson <rwatson@FreeBSD.org>
Date: Sat, 27 Jul 2002 19:50:28 +0000
Subject: [PATCH] Kernel options for Mandatory Access Control (MAC).

MAC support will be merged into the main tree over the next week in
reasonable size chunks; much more to follow.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, NAI Labs
---
 sys/conf/NOTES   | 8 ++++++++
 sys/conf/options | 7 ++++++-
 2 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/sys/conf/NOTES b/sys/conf/NOTES
index 22103606495..428bb52b31a 100644
--- a/sys/conf/NOTES
+++ b/sys/conf/NOTES
@@ -723,6 +723,14 @@ options 	P1003_1B
 options 	_KPOSIX_PRIORITY_SCHEDULING
 options 	_KPOSIX_VERSION=199309L
 
+
+#####################################################################
+# SECURITY POLICY PARAMETERS
+
+# Support for Mandatory Access Control (MAC)
+#options 	MAC
+#options 	MAC_NONE		# Statically link mac_none policy
+
 
 #####################################################################
 # CLOCK OPTIONS
diff --git a/sys/conf/options b/sys/conf/options
index 78689b125e9..273eb08bbfd 100644
--- a/sys/conf/options
+++ b/sys/conf/options
@@ -120,7 +120,12 @@ P1003_1B			opt_posix.h
 _KPOSIX_PRIORITY_SCHEDULING	opt_posix.h
 _KPOSIX_VERSION			opt_posix.h
 
-# TrustedBSD and POSIX.1e Kernel Options
+#####################################################################
+# SECURITY POLICY PARAMETERS
+
+# Support for Mandatory Access Control (MAC)
+MAC		opt_mac.h
+MAC_NONE	opt_dontuse.h
 
 # Do we want the config file compiled into the kernel?
 INCLUDE_CONFIG_FILE	opt_config.h