| service netd /system/bin/netd | |
| class main | |
| capabilities CHOWN DAC_OVERRIDE DAC_READ_SEARCH FOWNER IPC_LOCK KILL NET_ADMIN NET_BIND_SERVICE NET_RAW SETUID SETGID | |
| group root net_admin | |
| socket dnsproxyd stream 0660 root inet | |
| socket mdns stream 0660 root system | |
| socket fwmarkd stream 0660 root inet | |
| onrestart restart zygote | |
| onrestart restart zygote_secondary | |
| # b/121354779: netd itself is not updatable, but on startup it dlopen()s the resolver library | |
| # from the DNS resolver APEX. Mark it as updatable so init won't start it until all APEX | |
| # packages are ready. | |
| updatable |