--- orig/ipsecalgs.1m.txt	Mon Oct 30 17:43:51 2006
+++ new/ipsecalgs.1m.txt	Mon Oct 30 17:45:13 2006
@@ -417,14 +417,15 @@
      tocol  is  removed,  then  IPsec  cannot encrypt and decrypt
      packets.
 
-     This command requires sys_net_config  privilege  to  operate
-     and  thus  can  run only in the global zone. All zones share
+     This command requires sys_ip_config  privilege  to  operate
+     and  thus  can  run in the global zone and in exclusive-IP zones. 
+     All shared-IP zones share
      the same available set of algorithms; however, you  can  use
      ipsecconf(1M)  to  set  up system policy that uses differing
-     algorithms for various zones.
+     algorithms for various shared-IP zones.
+     All exclusive-IP zones have their own set of algorithms.
 
 
-