# init
allow init self:capability sys_module;
allow init self:process execmem;