mac_is_present(3)

mac_is_present3

Report whether the running system has mac support

Usage

#include <sys/mac.h>

int

mac_is_present(const char *policyname);

Library

Standard C Library (libc, -lc)

Overview

The mac_is_present() function determines whether the currently-running kernel supports MAC for a given policy or not. If policyname is non-NULL, the presence of the named policy (e.g. “biba”, “mls”, “te”) is checked, otherwise the presence of any MAC policies at all is checked.

Return values

If the system supports the given MAC policy, the value 1 is returned. If the specified MAC policy is not supported, the value 0 is returned. If an error occurs, the value -1 is returned.

Errors

[EINVAL]

The value of policyname is not valid.

[ENOMEM]

Insufficient memory was available to allocate internal storage.

Releases

44 releases since FreeBSD 7.0-RELEASE; the text changed 30 times.

  1. 7.0
  2. 7.1
  3. 7.2
  4. 7.3
  5. 7.4
  6. 8.0
  7. 8.1
  8. 8.2
  9. 8.3
  10. 8.4
  11. 9.0
  12. 9.1
  13. 9.2
  14. 9.3
  15. 10.0
  16. 10.1
  17. 10.2
  18. 10.3
  19. 10.4
  20. 11.0
  21. 11.1
  22. 11.2
  23. 11.3
  24. 11.4
  25. 12.0
  26. 12.1
  27. 12.2
  28. 12.3
  29. 12.4
  30. 13.0–13.2
  31. 13.3–16.0

History

Support for Mandatory Access Control was introduced in FreeBSD 5.0 as part of the TrustedBSD Project.

From base 16.0-CURRENT-20261027-61c70dc16a79 in FreeBSD 16.0-CURRENT (2026-10-27). Parsed by carta from the page's mdoc source.