1 files changed, 25 insertions, 0 deletions
diff --git a/libexec/rc/rc.d/mdoctl b/libexec/rc/rc.d/mdoctl
new file mode 100755
index 000000000000..2c302f8c7d2f
--- /dev/null
+++ b/libexec/rc/rc.d/mdoctl
@@ -0,0 +1,25 @@
+#!/bin/sh
+#
+# PROVIDE: mdoctl
+# REQUIRE: FILESYSTEMS
+# BEFORE:  LOGIN
+
+. /etc/rc.subr
+
+name="mdoctl"
+desc="MAC/do configuration"
+rcvar="mdoctl_enable"
+start_cmd="mdoctl_start"
+
+load_rc_config $name
+
+# doesn't make sense to run in a svcj: configures kernel
+mdoctl_svcj="NO"
+
+mdoctl_start() {
+	sysctl -qn security.mac.do >/dev/null || kldload -qn mac_do || return 1
+	$mdoctl_program enable
+	$mdoctl_program load -f "$mdoctl_config"
+}
+
+run_rc_command "$1"