| Jiyong Park | bc0e0dc | 2022-08-22 16:01:14 +0900 | [diff] [blame] | 1 | # kexec loads a crashdump kernel into memory using the kexec_file_load syscall. |
| 2 | type kexec, domain, coredomain; |
| 3 | type kexec_exec, exec_type, file_type, system_file_type; |
| 4 | |
| 5 | # allow kexec to write into /dev/kmsg for logging |
| 6 | allow kexec kmsg_device:chr_file w_file_perms; |
| 7 | |
| 8 | # kexec is launched by microdroid_manager with fork/execvp. |
| 9 | allow kexec microdroid_manager:fd use; |
| 10 | |
| 11 | # allow kexec to have SYS_BOOT |
| 12 | allow kexec self:capability sys_boot; |
| Inseob Kim | cb2c533 | 2022-11-16 19:59:07 +0900 | [diff] [blame] | 13 | |
| 14 | # allow kexec to write kmsg_debug |
| 15 | allow kexec kmsg_debug_device:chr_file w_file_perms; |