<aegis>
  <request>
    # cgroups
    <credential name="CAP::sys_nice"/>
    <credential name="CAP::sys_admin"/>
    <credential name="CAP::dac_override"/>
    <credential name="CAP::sys_ptrace"/>
    <credential name="CAP::net_admin"/>
    <credential name="CAP::sys_resource"/>
    # fmradio
    <credential name="CAP::net_raw"/>
    # ohmd
    <credential name="CAP::ipc_lock"/>
    # telephony
    <credential name="Cellular"/>
    <for path="/usr/sbin/ohmd"/>
  </request>
</aegis>
