# Description: Can configure firewall. This is restricted because it gives
# privileged access to networking and should only be used with trusted apps.
# Usage: reserved

# for connecting to xtables abstract socket
bind
connect
getsockname
getsockopt
recv
recvfrom
recvmsg
recvmmsg
send
sendmmsg
sendmsg
sendto
setsockopt
socket

# for ping and ping6
capset
setuid
