diff --git a/etc/Makefile b/etc/Makefile
index 243bb55ce6f..414c5502f2a 100644
--- a/etc/Makefile
+++ b/etc/Makefile
@@ -10,7 +10,7 @@ BIN1=	amd.map apmd.conf auth.conf \
 	dhclient.conf fbtab ftpusers gettytab group \
 	hosts hosts.allow hosts.equiv hosts.lpd \
 	inetd.conf login.access login.conf \
-	motd modems netconfig networks newsyslog.conf \
+	mac.conf motd modems netconfig networks newsyslog.conf \
 	phones printcap profile protocols \
 	rc rc.atm rc.devfs rc.diskless1 rc.diskless2 rc.firewall rc.firewall6 \
 	rc.network rc.network6 rc.pccard rc.sendmail rc.serial rc.shutdown \
diff --git a/etc/mac.conf b/etc/mac.conf
new file mode 100644
index 00000000000..57daab3682b
--- /dev/null
+++ b/etc/mac.conf
@@ -0,0 +1,17 @@
+#
+# $FreeBSD$
+#
+# TrustedBSD MAC userland policy configuration file.  Kernel modules
+# export label information, and mac.conf indicates to userland
+# applications what defaults they should use in the absense of any
+# other user-provided information.
+#
+
+#
+# Default label set to be used by simple MAC applications
+#
+
+default_file_labels ?biba,?mls,?sebsd,?te
+default_ifnet_labels ?biba,?mls,?sebsd,?te
+default_process_labels ?biba,?mls,?partition,?sebsd,?te
+