[selinux-policy: 10/3172] kernel can load modules

[Daniel J Walsh]

commit 5496553038630adaca54bb00a38a64663209fe9a
Author: Chris PeBenito <cpebenito at tresys.com>
Date:   Tue Apr 19 13:52:45 2005 +0000

    kernel can load modules

 refpolicy/policy/modules/kernel/kernel.te |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/refpolicy/policy/modules/kernel/kernel.te b/refpolicy/policy/modules/kernel/kernel.te
index 9ad2232..201cdc0 100644
--- a/refpolicy/policy/modules/kernel/kernel.te
+++ b/refpolicy/policy/modules/kernel/kernel.te
@@ -2,7 +2,7 @@
 # kernel_t is the domain of kernel threads.
 # It is also the target type when checking permissions in the system class.
 # 
-type kernel_t;
+type kernel_t, can_load_kernmodule;
 role system_r types kernel_t;
 
 domain_make_base_domain(kernel_t)