Copy stable/9 to releng/9.3 as part of the 9.3-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by: re (implicit)

Update posix1e-related man pages, especially as relates to MAC, to more
accurately reflect the last ten years of work.

Approved by: re (kib)

Following repo-copy of mac_is_present_np.3 to mac_is_present.3, remove
old file, update references, etc. The C function is already named
mac_is_present().

Obtained from: TrustedBSD Project

Markup, grammar, and spelling fixes.

Memory allocated by mac_to_text() must be freed using free(3) not
mac_free(3), which is used only for variables of type mac_t in
the FreeBSD implementation.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories

Add HISTORY sections to the remaining MAC library man pages.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories

s/SEE_ALSO/SEE ALSO/
Cross-reference mac(4) and mac(9)

Sponsored by: DARPA, Network Associates Laboratories

o Document mac_prepare() and associated functions
o Link mac_get_pid.3 to mac_get.3
o Update SEE ALSO to refer to mac_prepare, and added missing references
o Remove clause #3 on my work
o Update mac_get.3 for the updated MAC API

Sponsored by: DARPA, Network Associates Laboratories
Obtained from: TrustedBSD Project

mdoc(7) police: Added the missing .Os call; it's not strictly
necessary nowadays, but is documented as "required", and may
become so again in the future.

Approved by: re

mdoc(7) police: markup overhaul.

Approved by: re

o Make the COMPATIBILITY section a bit less redundant.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Labs

o Update man page to reflect the new prototypes for mac_{to,from}_text.
o Remove a (currently) no-longer-pertinent entry from errors.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Labs

Scoop out examples illustrating the label text format and refer to
maclabel(7) instead.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Labs

Introduce support for Mandatory Access Control and extensible
kernel access control.

Extensions to libc to provide basic MAC label manipulation facilities
for userland. These interface will be replaced in the next month
or two with more flexible interfaces, but provide sufficient support
to allow use of the Biba and MLS policies for user applications.

libc_r wrappers to follow.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs