The US NSA has done some pretty decent work on behalf of Linux security, not to mention numerous independant Linux security projects, most of which the source code (including the NSA's) is readily available. Since BSD is UNIX a port of the sources from Linux should not be too difficult -sounds like an easy 1.2 Mil$ to me.