diff --git a/basic/non_plat/init_insmod_sh.te b/basic/non_plat/init_insmod_sh.te
index a9fb4e4..4db24bf 100644
--- a/basic/non_plat/init_insmod_sh.te
+++ b/basic/non_plat/init_insmod_sh.te
@@ -12,6 +12,13 @@ allow init_insmod_sh kernel:key search;
 # Purpose : modprobe need proc_modules
 allow init_insmod_sh proc_modules:file r_file_perms;
 
+# Allow init.insmod.sh to read cmdline
+allow init_insmod_sh proc_cmdline:file r_file_perms;
+
+# Allow required capabilities for modprobe
+allow init_insmod_sh self:capability sys_nice;
+allow init_insmod_sh kernel:process setsched;
+
 # Date : WK20.46
 # Purpose : Set the vendor.all.modules.ready property
 set_prop(init_insmod_sh, vendor_mtk_device_prop)