diff --git a/sys/net/agr/if_agr.c b/sys/net/agr/if_agr.c
index be2b0c3ad6bf..4d426a3bfea0 100644
--- a/sys/net/agr/if_agr.c
+++ b/sys/net/agr/if_agr.c
@@ -1,4 +1,4 @@
-/*	$NetBSD: if_agr.c,v 1.6 2006/07/08 05:56:48 yamt Exp $	*/
+/*	$NetBSD: if_agr.c,v 1.7 2006/10/25 22:56:14 elad Exp $	*/
 
 /*-
  * Copyright (c)2005 YAMAMOTO Takashi,
@@ -27,7 +27,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: if_agr.c,v 1.6 2006/07/08 05:56:48 yamt Exp $");
+__KERNEL_RCSID(0, "$NetBSD: if_agr.c,v 1.7 2006/10/25 22:56:14 elad Exp $");
 
 #include "bpfilter.h"
 #include "opt_inet.h"
@@ -859,8 +859,10 @@ agr_ioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
 	case SIOCSETAGR:
 		splx(s);
 		p = curproc; /* XXX */
-		error = kauth_authorize_generic(p->p_cred,
-		    KAUTH_GENERIC_ISSUSER, &p->p_acflag);
+		error = kauth_authorize_network(p->p_cred,
+		    KAUTH_NETWORK_INTERFACE,
+		    KAUTH_REQ_NETWORK_INTERFACE_SETPRIV, ifp, (void *)cmd,
+		    NULL);
 		if (!error) {
 			error = agrreq_copyin(ifr->ifr_data, &ar);
 		}