1 2 3
allow ims self:capability net_raw; allow ims self:socket { read bind create write ioctl }; allow ims imscm_service:service_manager add;