Allows a process to configure the Mandatory Access
Control (MAC) policy. Not all kernels are configured
with a MAC enabled, but if they are this capability is
reserved for code to perform administration tasks.