# we don't allow modules
dontaudit netd self:capability sys_module;