site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com See the following for more information on MAC: <http://www.trustedbsd.org/mac.html> <http://www.sedarwin.org/> <http://www.trustedbsd.org/> Thanks a lot for the pointers. Michael _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... MAC is all about actor, object, and action, and then controlling whether or not its allowed. It's not about policies. I understand the distinction. I did not know that the in-kernel architecture actually offers policies as plug-ins (KEXTs). This is great also from a computer scientist standpoint, because we can experiment with more elaborate policies without bothering Darwin mainline development. This email sent to site_archiver@lists.apple.com