1allow netd sysfs_net:dir search; 2allow netd sysfs_net:file w_file_perms; 3 4# in addition to ioctl commands granted to domain allow netd to use: 5allowxperm netd self:udp_socket ioctl { SIOCSIFFLAGS SIOCSIFADDR SIOCGIFHWADDR }; 6