sepolicy/kernel.te

allow kernel self:capability net_admin;