allow netd self:capability sys_resource; allow netd sysfs_net:file rw_file_perms;