OpenBSD (Network) ACLs

[Andi <andi_(_at_)_void_(_dot_)_at>]

Hi,

I'm a systemadministrator for an OpenBSD server. I have
approximatly 25 users and I dont want that every user 
can use bind()/connect() with/to any address/port. Therefore
I wrote a kernel patch to restrict bind()/connect() for users.
The communication is done via another pseudo device over ioctl.

More Info:
http://void.at/~andi/openbsdacl/

What do you think about it?

greets
Andi