1 type modprobe, domain; 2 3 allow modprobe proc_modules:file r_file_perms; 4 allow modprobe self:capability sys_module; 5 allow modprobe kernel:key search; 6 recovery_only(` 7 allow modprobe rootfs:system module_load; 8 allow modprobe rootfs:file r_file_perms; 9 ') 10 allow modprobe { system_file }:system module_load; 11 r_dir_file(modprobe, { system_file }) 12