diff --git a/public/modprobe.te b/public/modprobe.te
index 24a6b3b63..a286c1719 100644
--- a/public/modprobe.te
+++ b/public/modprobe.te
@@ -2,6 +2,7 @@ type modprobe, domain;
 
 allow modprobe proc_modules:file r_file_perms;
 allow modprobe self:capability sys_module;
+allow modprobe kernel:key search;
 recovery_only(`
   allow modprobe rootfs:system module_load;
   allow modprobe rootfs:file r_file_perms;