| Jiyong Park | bc0e0dc | 2022-08-22 16:01:14 +0900 | [diff] [blame^] | 1 | # kexec loads a crashdump kernel into memory using the kexec_file_load syscall. |
| 2 | type kexec, domain, coredomain; | ||||
| 3 | type kexec_exec, exec_type, file_type, system_file_type; | ||||
| 4 | |||||
| 5 | # allow kexec to write into /dev/kmsg for logging | ||||
| 6 | allow kexec kmsg_device:chr_file w_file_perms; | ||||
| 7 | |||||
| 8 | # kexec is launched by microdroid_manager with fork/execvp. | ||||
| 9 | allow kexec microdroid_manager:fd use; | ||||
| 10 | |||||
| 11 | # allow kexec to have SYS_BOOT | ||||
| 12 | allow kexec self:capability sys_boot; | ||||