dontaudit netd self:capability sys_module;