# Standard Apple Research Configurations:
# -------- ----- -------- ---------------
#
-# RELEASE = [ppc mach medium vol pst gdb simple_clock kernstack nfsclient nfsserver quota fifo fdesc union ffs cd9660 compat_43 revfs noprofiling hfs volfs devfs synthfs netat mrouting ipdivert ipfirewall ktrace inet6 ipsec tcpdrop_synfin gif stf]
-# RELEASE_TRACE = [RELEASE kdebug]
-# PROFILE = [ppc mach medium vol pst gdb debug simple_clock kernstack nfsclient nfsserver quota fifo fdesc union ffs cd9660 compat_43 revfs profile hfs volfs devfs synthfs netat mrouting ipdivert ipfirewall ktrace inet6 ipsec tcpdrop_synfin gif stf]
-# DEBUG = [ppc mach medium vol pst gdb debug simple_clock kernstack nfsclient nfsserver quota fifo fdesc union ffs cd9660 compat_43 revfs profiling hfs volfs devfs synthfs netat mrouting mach_assert ipdivert ipfirewall ktrace inet6 ipsec tcpdrop_synfin gif stf]
-# DEBUG_TRACE = [DEBUG kdebug]
+# BASE = [ ppc mach medium config_dtrace vol pst gdb noprofiling simple_clock kernstack sysv_sem sysv_msg sysv_shm audit panic_info config_imageboot config_workqueue ]
+# FILESYS = [ devfs revfs hfs journaling fdesc config_fse quota namedstreams fifo union config_volfs hfs_compression ]
+# NETWORKING = [ inet inet6 compat_oldsock tcpdrop_synfin bpfilter ipdivert ipfirewall ipv6firewall ipfw2 dummynet traffic_mgt sendfile netmibs bond vlan gif stf zlib randomipid ifnet_input_chk ipflow pkt_priority ]
+# NFS = [ nfsclient nfsserver ]
+# VPN = [ ipsec ]
+# RELEASE = [ BASE NETWORKING NFS VPN FILESYS libdriver ]
+# DEVELOPMENT = [ RELEASE ]
+# PROFILE = [ RELEASE profile ]
+# DEBUG = [ BASE NETWORKING NFS VPN FILESYS libdriver_g debug xpr_debug mach_assert pf pflog ]
#
######################################################################
#
options UXPR # user-level XPR package # <uxpr>
config mach_kernel swap generic # <mach>
+#
+# Note: MAC/AUDIT options must be set in all the bsd/conf, osfmk/conf, and
+# security/conf MASTER files.
+#
+options CONFIG_MACF # Mandatory Access Control Framework
+options CONFIG_MACF_SOCKET_SUBSET # MAC socket subest (no labels)
+#options CONFIG_MACF_SOCKET # MAC socket labels
+#options CONFIG_MACF_NET # mbuf
+#options CONFIG_MACF_DEBUG
+#options CONFIG_MACF_MACH
+options CONFIG_AUDIT # Kernel auditing
+
options EVENT # <event>
#