# DHCP server type dhcpserver, domain; type dhcpserver_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(dhcpserver) net_domain(dhcpserver) allow dhcpserver execns:fd use; get_prop(dhcpserver, net_eth0_prop); allow dhcpserver self:udp_socket { ioctl create setopt bind }; allow dhcpserver self:capability { net_raw net_bind_service };