1 allow netd sysfs_net:dir search; 2 allow netd sysfs_net:file w_file_perms; 3 4 # in addition to ioctl commands granted to domain allow netd to use: 5 allowxperm netd self:udp_socket ioctl { SIOCSIFFLAGS SIOCSIFADDR SIOCGIFHWADDR }; 6