| # Enable new networking controls. | |
| policycap network_peer_controls; | |
| # Enable open permission check. | |
| policycap open_perms; | |
| # Enable separate security classes for | |
| # all network address families previously | |
| # mapped to the socket class and for | |
| # ICMP and SCTP sockets previously mapped | |
| # to the rawip_socket class. | |
| policycap extended_socket_class; | |