Where Next?

• Enhanced userland label interface

  • Expose the kernel labeling flexibility to userland so tools can take advantage of it, and adapt to the policy environment

• Performance testing

  • Two cases: 'options MAC' disabled, and 'options MAC' enabled. Goal is no performance hit for disabled, <3% performance hit (macrobenchmark) for enabled with no policies and <5% for null policy.

• Integration into FreeBSD 5.0-CURRENT branch