1type modprobe, domain; 2 3allow modprobe proc_modules:file r_file_perms; 4allow modprobe proc_cmdline:file r_file_perms; 5allow modprobe self:global_capability_class_set sys_module; 6allow modprobe kernel:key search; 7recovery_only(` 8 allow modprobe rootfs:system module_load; 9 allow modprobe rootfs:file r_file_perms; 10') 11