\subsection{014: ways to manipulate tunnel perms.}

netfilter, pf\_key, ioctl, $/dev/ipsecNNN$ 

\subsubsection{014: Definition of requirement }

This is a variation of the question \#13: how do user applications request
security services from the kernel. 





