K 10 svn:author V 7 trhodes K 8 svn:date V 27 2004-08-21T20:15:08.000000Z K 7 svn:log V 279 Give the mac_bsdextended(4) policy the ability to match and apply on a first rule only in place of all rules match. This is similar to how ipfw(8) works. Provide a sysctl, mac_bsdextended_firstmatch_enabled, to enable this feature. Reviewed by: re (jhb) Aprroved by: re (jhb) END