Do you mean "consistent for each given ioctl" or "consistent for all"?
We're a bit away from the later (but not too far):

A fgrep -l suser *.c in sys/net shows these:
bpf.c
if.c
if_gif.c
if_gre.c
if_ppp.c
if_sl.c
if_strip.c
if_tun.c
if_vlan.c
ppp_tty.c
raw_usrreq.c
rtsock.c

I'm not sure we should go for the "all in if.c" way, as introducing special
knowledge about certain ioctl in a generic module strikes me as an abstraction
violation. But duplicating the (small) code everwhere certainly is not the
right way either.


Martin