type regulatory, domain;
|
type regulatory_exec, exec_type, vendor_file_type, file_type;
|
init_daemon_domain(regulatory)
|
|
allow regulatory self:capability net_admin;
|
allow regulatory self:netlink_kobject_uevent_socket { bind create read setopt };
|
allow regulatory vendor_file:file execute_no_trans;
|
allow regulatory self:netlink_generic_socket { bind create getattr setopt write read };
|
