control logic and policy registration remaining in that file, and access control checks broken out into other files by class of check. Obtained from: TrustedBSD Project
modularize MAC policy layout. Obtained from: TrustedBSD Project