type rename_netiface, domain;
type rename_netiface_exec, exec_type, vendor_file_type, file_type;

init_daemon_domain(rename_netiface)

allow rename_netiface self:capability { net_admin net_raw sys_module };
allow rename_netiface self:udp_socket { create ioctl };
allow rename_netiface self:netlink_route_socket { bind create read write getattr };

# On kernel < 6.13
allow rename_netiface self:netlink_route_socket nlmsg_write;
# On kernel >= 6.13
allow rename_netiface self:netlink_route_socket nlmsg;
allowxperm rename_netiface self:netlink_route_socket nlmsg RTM_SETLINK;

allow rename_netiface kernel:system module_request;