On Sun, Jun 13, 2004 at 10:59:48PM -0700, Jeff Rizzo wrote:
> Can someone explain to me why the contents of netipsec/keydb.h
> are #ifdef _KERNEL ?

To protect the application namespace. Things like secasindex and
sockaddr_union are not part of the API and their names might collide
with application defined structures.

>  The part I'm specifically interested in
> at the moment is the definition of union sockaddr_union;

Just define such a union in the code yourself. You do not need the one from
keydb.h for any userland reason I could see, but I might be missing
something.

Martin