type modprobe, domain;
|
|
allow modprobe proc_modules:file r_file_perms;
|
allow modprobe self:global_capability_class_set sys_module;
|
allow modprobe kernel:key search;
|
recovery_only(`
|
allow modprobe rootfs:system module_load;
|
allow modprobe rootfs:file r_file_perms;
|
')
|
