allow vendor_per_mgr self:capability net_raw;
allow vendor_per_mgr sysfs:file { open read };