From 5496553038630adaca54bb00a38a64663209fe9a Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Tue, 19 Apr 2005 13:52:45 +0000
Subject: [PATCH] kernel can load modules

---
 refpolicy/policy/modules/kernel/kernel.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/refpolicy/policy/modules/kernel/kernel.te b/refpolicy/policy/modules/kernel/kernel.te
index 9ad223284..201cdc0d2 100644
--- a/refpolicy/policy/modules/kernel/kernel.te
+++ b/refpolicy/policy/modules/kernel/kernel.te
@@ -2,7 +2,7 @@
 # kernel_t is the domain of kernel threads.
 # It is also the target type when checking permissions in the system class.
 # 
-type kernel_t;
+type kernel_t, can_load_kernmodule;
 role system_r types kernel_t;
 
 domain_make_base_domain(kernel_t)