diff --git a/policy/modules/kernel/kernel.te b/policy/modules/kernel/kernel.te
index cb0211152..4480ec9cb 100644
--- a/policy/modules/kernel/kernel.te
+++ b/policy/modules/kernel/kernel.te
@@ -512,6 +512,7 @@ if( ! secure_mode_insmod ) {
 	# gt: there seems to be no trace of the above, at
 	# least in kernel versions greater than 2.6.37...
 	allow can_load_kernmodule self:capability sys_nice;
+	kernel_search_key(can_load_kernmodule)
 	kernel_setsched(can_load_kernmodule)
 }
 
diff --git a/policy/modules/system/modutils.te b/policy/modules/system/modutils.te
index 63208ba1a..af022eb9b 100644
--- a/policy/modules/system/modutils.te
+++ b/policy/modules/system/modutils.te
@@ -60,7 +60,6 @@ kernel_write_proc_files(kmod_t)
 kernel_mount_debugfs(kmod_t)
 kernel_mount_kvmfs(kmod_t)
 kernel_read_debugfs(kmod_t)
-kernel_search_key(kmod_t)
 # Rules for /proc/sys/kernel/tainted
 kernel_read_kernel_sysctls(kmod_t)
 kernel_rw_kernel_sysctl(kmod_t)