#Policies for IPv6 tethering | |
allow netd netd:capability { setgid setuid }; | |
allow netd netd:packet_socket { create bind setopt read ioctl }; | |
allow netd wfd_app:fd use; | |
allow netd wfd_app:tcp_socket { read write setopt getopt }; | |
dontaudit netd self:capability sys_module; | |
#needed for ipt_TCPMSS and ip6t_TCPMSS | |
allow netd kernel:system module_request; | |
unix_socket_connect(netd, cnd, cnd) |