type rename_netiface, domain; | |
type rename_netiface_exec, exec_type, vendor_file_type, file_type; | |
init_daemon_domain(rename_netiface) | |
allow rename_netiface self:capability { net_admin net_raw sys_module }; | |
allow rename_netiface self:udp_socket { create ioctl }; | |
allow rename_netiface self:netlink_route_socket { bind create nlmsg_write read write getattr }; | |
allow rename_netiface kernel:system module_request; |