# Enable new networking controls. policycap network_peer_controls; # Enable open permission check. policycap open_perms; # Enable separate security classes for # all network address families previously # mapped to the socket class and for # ICMP and SCTP sockets previously mapped # to the rawip_socket class. policycap extended_socket_class;