1type modprobe, domain;
2
3allow modprobe proc_modules:file r_file_perms;
4allow modprobe self:global_capability_class_set sys_module;
5allow modprobe kernel:key search;
6recovery_only(`
7 allow modprobe rootfs:system module_load;
8 allow modprobe rootfs:file r_file_perms;
9')
10