From Debian package 0.2.20091117-3
0084-insmod-policy-adjustments-Allow-insmod_t-the-capabil.patch (part of)

  * Allow insmod_t to mount a rpc_pipefs_t filesystem.

Index: policy/modules/system/modutils.te
===================================================================
--- policy/modules/system/modutils.te.orig
+++ policy/modules/system/modutils.te
@@ -114,6 +114,8 @@
 
 allow insmod_t self:udp_socket create_socket_perms;
 allow insmod_t self:rawip_socket create_socket_perms;
+fs_mount_rpc_pipefs(insmod_t)
+fs_list_rpc(insmod_t)
 term_read_console(insmod_t)
 
 # Read module config and dependency information