allow shell kernel:system { module_request };
allow shell su:process signal;