>> 	gif was not affected, as we have a check in sys/net/if.c
>> 	(where gif_ioctl is called).
>Ok, I didn't notice that (and prefered to be conerative when changing
>it). We should double check all ioctl codes and remove the redundant
>checks then, maybe moving the if_gre.c checks to if.c too.

	as long as all checks are consistent, i.e. if the situation is either
	of those, i'm happy.
	- all if_*.c calls suser() on their own
	- all suser() calls are made in sys/net/if.c, or sys/netinet*/in*.c
	  or something similar

itojun