Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.

Additional commits post-branch will follow.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Add "-q" argument to setfmac and setfsmac to allow the patient but
exhausted reader not to see non-fatal warnings.

Break setfmac.8 into two actual man pages, and reword bits of the
setfsmac(8) documentation.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories

Cross-reference mac(4).

Sponsored by: DARPA, Network Associates Laboratories

Uniformly refer to a file system as "file system".

Approved by: re

mdoc(7) police: Added the missing .Os call; it's not strictly
necessary nowadays, but is documented as "required", and may
become so again in the future.

Approved by: re

mdoc(7) police: nit.

Approved by: re

Mdoc markup and language fixes.

Submitted by: ru
Approved by: re (jhb)
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories

Add support for -R for file relabel operations.

Add 'setfsmac' link, which permits labels to be provided in a label
specification file, making it easier to provide initial file system
labeling specifications. This is used by the new mac_lomac to
provide initial system labeling and policy, and by sebsd, the port
of SELinux FLASK/TE to FreeBSD.

Approved by: re (jhb)
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories

mdoc(7) police: sweep.

Introduce simple command line tools to manage MAC labels on processes and
files. Basically wrappers for mac_{get,set}_{file,link,pid,proc}(3).
Man pages to be updated shortly.

Approved by: re
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories