{
    "jobs" : [{
            "name" : "services:netsysnative",
            "cmds" : [
                "mount bpf bpf /sys/fs/bpf nodev",
                "mount cgroup2 none /sys/fs/cgroup nodev"
            ]
        }
    ],
    "services" : [{
            "name" : "netsysnative",
            "path" : ["/system/bin/sa_main", "/system/profile/netsysnative.json"],
            "uid" : "netsysnative",
            "gid" : ["netsysnative", "net_manager", "system", "shell", "root", "bluetooth", "netsys_socket", "dev_tun_access"],
            "caps" : ["CAP_NET_ADMIN", "CAP_NET_BIND_SERVICE", "CAP_NET_RAW", "CAP_SYS_ADMIN", "CAP_SYS_RESOURCE",
                      "CAP_CHOWN", "CAP_FOWNER", "CAP_MKNOD"],
            "critical" : [0, 50, 10],
            "jobs" : {
                "on-start" : "services:netsysnative"
            },
            "socket" : [{
                "name" : "dnsproxyd",
                "family" : "AF_UNIX",
                "type" : "SOCK_STREAM",
                "protocol" : "default",
                "permissions" : "0660",
                "uid" : "netsysnative",
                "gid" : "netsys_socket",
                "option" : [
                ]
            }, {
                "name" : "fwmarkd",
                "family" : "AF_UNIX",
                "type" : "SOCK_STREAM",
                "protocol" : "default",
                "permissions" : "0660",
                "uid" : "netsysnative",
                "gid" : "netsys_socket",
                "option" : [
                ]
            }, {
                "name" : "tunfd",
                "family" : "AF_UNIX",
                "type" : "SOCK_STREAM",
                "protocol" : "default",
                "permissions" : "0660",
                "uid" : "netsysnative",
                "gid" : "netsys_socket",
                "option" : [
                ]
            }],
            "permission" : [
                "ohos.permission.MANAGE_NET_STRATEGY",
                "ohos.permission.ACCESS_CERT_MANAGER",
                "ohos.permission.ACCESS_USER_TRUSTED_CERT",
                "ohos.permission.ACCESS_SYSTEM_APP_CERT"
            ],
            "permission_acls" : [
                "ohos.permission.ACCESS_USER_TRUSTED_CERT",
                "ohos.permission.ACCESS_SYSTEM_APP_CERT"
            ],
            "secon" : "u:r:netsysnative:s0"
        }
    ]
}