platform_system_sepolicy/policy_capabilities

# Enable new networking controls.
policycap network_peer_controls;

# Enable open permission check.
policycap open_perms;