1allow vendor_init vendor_file:system { module_load }; 2allow vendor_init self:capability { sys_module }; 3allow vendor_init kernel:system module_request; 4allow vendor_init default_prop:file read; 5