1allow kernel self:capability net_admin;
2