type rename_netiface, domain; type rename_netiface_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(rename_netiface) allow rename_netiface self:capability { net_admin net_raw sys_module }; allow rename_netiface self:udp_socket { create ioctl }; allow rename_netiface self:netlink_route_socket { bind create nlmsg_write read write }; allow rename_netiface kernel:system module_request;