1*2810ac1bSKiyoung KimAllows a process to configure the Mandatory Access
2*2810ac1bSKiyoung KimControl (MAC) policy. Not all kernels are configured
3*2810ac1bSKiyoung Kimwith a MAC enabled, but if they are this capability is
4*2810ac1bSKiyoung Kimreserved for code to perform administration tasks.
5