1type modprobe, domain;
2
3allow modprobe proc_modules:file r_file_perms;
4allow modprobe proc_cmdline:file r_file_perms;
5allow modprobe self:global_capability_class_set sys_module;
6allow modprobe kernel:key search;
7recovery_only(`
8  allow modprobe rootfs:system module_load;
9  allow modprobe rootfs:file r_file_perms;
10')
11