Merge "allow modprobe to load signed kernel modules" into oc-dev

public/modprobe.te

@@ -2,6 +2,7 @@ type modprobe, domain;
 
 allow modprobe proc_modules:file r_file_perms;
 allow modprobe self:capability sys_module;
+allow modprobe kernel:key search;
 recovery_only(`
   allow modprobe rootfs:system module_load;
   allow modprobe rootfs:file r_file_perms;