#allow cnd diag_device:chr_file { read write };
#allow cnd self:capability { net_raw };