1 type modprobe, domain;
2
3 allow modprobe proc_modules:file r_file_perms;
4 allow modprobe self:global_capability_class_set sys_module;
5 allow modprobe kernel:key search;
6 recovery_only(`
7 allow modprobe rootfs:system module_load;
8 allow modprobe rootfs:file r_file_perms;
9 ')
10