1# DHCP client
2type dhcpclient, domain;
3type dhcpclient_exec, exec_type, vendor_file_type, file_type;
4
5init_daemon_domain(dhcpclient)
6net_domain(dhcpclient)
7
8allow dhcpclient execns:fd use;
9
10set_prop(dhcpclient, net_wlan0_prop);
11set_prop(dhcpclient, net_eth0_prop);
12set_prop(dhcpclient, net_radio0_prop);
13dontaudit dhcpclient kernel:system module_request;
14allow dhcpclient self:capability { net_admin net_raw };
15allow dhcpclient self:netlink_route_socket { ioctl write nlmsg_write };
16allow dhcpclient varrun_file:dir search;
17allow dhcpclient self:packet_socket { create bind write read };
18allowxperm dhcpclient self:netlink_route_socket ioctl { SIOCGIFFLAGS
19                                                        SIOCSIFFLAGS
20                                                        SIOCSIFMTU
21                                                        SIOCGIFINDEX
22                                                        SIOCGIFHWADDR };
23