Developing access control extensions for operating systems is an expensive and time-consuming task. Mechanisms for access control extension lag behind industry standard extension solutions for file systems, process schedulers, and device drivers, and suffer from a number of serious flaws in modern operating system kernels. The TrustedBSD MAC Framework provides a flexible and modular environment for access control extensions on the open source FreeBSD operating system, reducing the cost of implementation by abstracting out common elements found in many extensions. A variety of security policies have been implemented using the MAC Framework.
Citation:
Robert Watson, Brian Feldman, Adam Migus, Chris Vance, "The TrustedBSD MAC Framework," discex, vol. 2, pp.13, DARPA Information Survivability Conference and Exposition - Volume II, 2003