1Allows a process to configure the Mandatory Access 2Control (MAC) policy. Not all kernels are configured 3with a MAC enabled, but if they are this capability is 4reserved for code to perform administration tasks. 5