sepolicy/vendor/netd.te

allow netd self:capability sys_module;
allow netd init:tcp_socket rw_socket_perms_no_ioctl;

allow netd sysfs_virtual:dir search;
allow netd sysfs_virtual:file w_file_perms;