Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.

Additional commits post-branch will follow.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Update Capsicum and Mandatory Access Control manual pages
to no longer claim they are experimental.

Reviewed by: rwatson@, wblock@
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D2985

mdoc: order prologue macros consistently by Dd/Dt/Os

Although groff_mdoc(7) gives another impression, this is the ordering
most widely used and also required by mdocml/mandoc.

Reviewed by: ru
Approved by: philip, ed (mentors)

Remove self-reference.

Scheduled mdoc(7) sweep.

Update Biba and MLS man pages to take into account recent renaming of
the 'single' label element to 'effective.

Mechanically kill hard sentence breaks and double whitespaces.

mdoc(7): Fix common mistakes made in the SEE ALSO section.

Assorted mdoc(7) fixes.

Kill whitespace at EOL.

Approved by: re (blanket)

Document the new mac_portacl(4) policy.

Sponsored by: DARPA, Network Associates Laboratories
Obtained from: TrustedBSD Project

o Add a note explaining the meaning of mls/equal beyond "equal to all
labels"
o Remove the ++ compartment range notation example as this has not yet
been merged into CVS.
o Include a "Runtime Configuration" section listing all of the relevant
sysctl knobs for this policy.

Sponsored by: DARPA, Network Associates Laboratories
Obtained from: TrustedBSD Project

Properly mark up column lists. This does not affect output; I just had
the arguments to .Bl incorrect.

Sponsored by: DARPA, Network Associates Laboratories

Update cross-references to include mac(4).

Sponsored by: DARPA, Network Associates Laboratories

o Refer to "Network Associates Laboratories" instead of "NAI Labs" or
"Network Associates Labs" in the copyright notice.
o Remove clause #3 in the license terms.
o Remove the line break from my name.

Sponsored by: DARPA, Network Associates Laboratories

Cross-reference mac_lomac.4

Sponsored by: DARPA, Network Associates Laboratories

o Change "accesses" to "access" (sounds better)
o Correct the range of compartments (1..256 instead of 0..255)
o Use the correct name for "Network Associates Laboratories"

MFC Candidate.

Sponsored by: DARPA, Network Associates Laboratories
Reviewed by: Adam Migus <adam@migus.org>

Use the correct compartment notation in sample labels.

Sponsored by: DARPA, Network Associates Labs
Approved by: re (blanket)

Change an "i.e." to an "e.g." This will be changed when a better
solution is worked out to clarify more specific compartment-related
cases.

Submitted by: dcs
Sponsored by: DARPA, Network Associates Labs
Approved by: re (blanket)

Document the following MAC policies:
o ifoff: Interface silencing policy
o partition: Process partitioning policy

Add associated Makefile entries and man page cross-references.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Labs
Approved by: re (blanket)

Document the following MAC policies:
o None: Stub policy
o Seeotheruids: The "see processes and sockets owned by other users" policy
o Test: Debugging policy

Standardize the SYNOPSIS and HISTORY sections.

Update SEE ALSO sections.

Forced commit:
Credit Hiten M. Pandya <hiten@angelica.unixdaemons.com> with reporting that
suser_cred(9) should've been suser(9).

Document the following MAC policies:
o Biba: A data integrity policy
o BSD Extended: Support for the firewall-like access controls (ugidfw(8))
o MLS: Multi-level security, a confidentiality policy

(These files originally lived in src/share/man/man9)

Approved by: re (blanket)
Sponsored by: DARPA, Network Associates Labs
Obtained from: TrustedBSD Project