1 type init_eth0, domain; 2 type init_eth0_exec, system_file_type, exec_type, file_type; 3 4 init_daemon_domain(init_eth0) 5 6 allow init_eth0 self:capability { net_admin net_raw }; 7 allow init_eth0 self:udp_socket { create ioctl }; 8 allowxperm init_eth0 self:udp_socket ioctl priv_sock_ioctls; 9 allow init_eth0 shell_exec:file { execute getattr read }; 10 allow init_eth0 toolbox_exec:file { execute execute_no_trans getattr open read }; 11