>so.... does this mean that /kern is now REQUIRED for a netbsd feature? no. see sbin/setkey/setkey.c for what it does. it uses /kern if available, and uses PF_KEY socket if not. itojun