Following up, I'll be implementing the device scope with specific routines per the device (for now only TTYs) for type-safety and clarity: int kauth_authorize_device_tty(cred, action, tty); the network interfaces will be part of the network scope, under the KAUTH_NETWORK_INTERFACE action. -e. -- Elad Efrat