1type rename_netiface, domain; 2type rename_netiface_exec, exec_type, vendor_file_type, file_type; 3 4init_daemon_domain(rename_netiface) 5 6allow rename_netiface self:capability { net_admin net_raw sys_module }; 7allow rename_netiface self:udp_socket { create ioctl }; 8allow rename_netiface self:netlink_route_socket { bind create nlmsg_write read write }; 9 10allow rename_netiface kernel:system module_request; 11