--- orig/ipsecconf.1m.txt	Mon Oct 30 18:01:53 2006
+++ new/ipsecconf.1m.txt	Mon Oct 30 18:03:09 2006
@@ -1506,9 +1506,10 @@
      svcadm(1M). The service's status can be  queried  using  the
      svcs(1) command.
 
-     This command requires sys_net_config  privilege  to  operate
-     and  thus  can run only in the global zone; the policy rules
-     it manages affect all zones on the system.
+     This command requires sys_ip_config  privilege  to  operate
+     and  thus can run in the global zone and in exclusive-IP zones.
+     The global zone's policy rules affect the shared-IP
+     zones on the system.