sepolicy/vendor_init.te

allow vendor_init vendor_file:system { module_load };
allow vendor_init self:capability { sys_module };
allow vendor_init kernel:system module_request;