1type modprobe, domain;
2
3allow modprobe proc_modules:file r_file_perms;
4allow modprobe self:capability sys_module;
5allow modprobe kernel:key search;
6recovery_only(`
7  allow modprobe rootfs:system module_load;
8  allow modprobe rootfs:file r_file_perms;
9')
10allow modprobe { system_file }:system module_load;
11r_dir_file(modprobe, { system_file })
12