# in addition to ioctl commands granted to domain allow netd to use: allowxperm netd self:udp_socket ioctl { SIOCSIFFLAGS SIOCSIFADDR SIOCGIFHWADDR }; # Enable XTRA downloads allow netd location:fd use; allow netd location:tcp_socket { getopt read setopt write };