10 lines
271 B
Text
10 lines
271 B
Text
|
type modprobe, domain;
|
||
|
|
||
|
allow modprobe proc_modules:file r_file_perms;
|
||
|
allow modprobe self:global_capability_class_set sys_module;
|
||
|
allow modprobe kernel:key search;
|
||
|
recovery_only(`
|
||
|
allow modprobe rootfs:system module_load;
|
||
|
allow modprobe rootfs:file r_file_perms;
|
||
|
')
|