allow vendor_init vendor_file:system { module_load }; allow vendor_init self:capability { sys_module }; allow vendor_init kernel:system module_request; allow vendor_init default_prop:file read;