| # associate netdomain to use for accessing internet sockets | |
| net_domain(hal_tetheroffload_default) | |
| # Allow operations with /dev/ipa, /dev/wwan_ioctl and /dev/ipaNatTable | |
| allow hal_tetheroffload_default ipa_dev:chr_file rw_file_perms; | |
| # Allow creating and modifying the PID file | |
| allow hal_tetheroffload_default ipa_vendor_data_file:dir w_dir_perms; | |
| allow hal_tetheroffload_default ipa_vendor_data_file:file create_file_perms; | |