type init_eth0, domain; type init_eth0_exec, system_file_type, exec_type, file_type; init_daemon_domain(init_eth0) allow init_eth0 self:capability { net_admin net_raw }; allow init_eth0 self:udp_socket { create ioctl }; allowxperm init_eth0 self:udp_socket ioctl priv_sock_ioctls; allow init_eth0 shell_exec:file { execute getattr read }; allow init_eth0 toolbox_exec:file { execute execute_no_trans getattr open read };