sepolicy: Update the capability with net_bind_service

Remove setuid/setgid/dac_override capability and add
net_bind_service for WLAN service.

Change-Id: Iad14d4c08c6684bf7d62301d30ea002f548e5fe7
CRs-Fixed: 1048891
Bug: 30768310
Signed-off-by: Srinivas Girigowda <sgirigow@codeaurora.org>
diff --git a/sepolicy/cnss-daemon.te b/sepolicy/cnss-daemon.te
index c2e1e77..bf63d7c 100644
--- a/sepolicy/cnss-daemon.te
+++ b/sepolicy/cnss-daemon.te
@@ -4,7 +4,10 @@
 
 # STOPSHIP b/28340421
 # Temporarily grant this permission and log its use.
-allow cnss-daemon self:capability net_admin;
+allow cnss-daemon self:capability {
+    net_admin
+    net_bind_service
+};
 auditallow cnss-daemon self:capability net_admin;
 
 init_daemon_domain(cnss-daemon)