1 # vpn tunneling protocol manager 2 type mtp, domain; 3 type mtp_exec, exec_type, file_type; 4 5 net_domain(mtp) 6 7 # pptp policy 8 allow mtp self:socket create_socket_perms_no_ioctl; 9 allow mtp self:global_capability_class_set net_raw; 10 allow mtp ppp:process signal; 11 allow mtp vpn_data_file:dir search; 12