1*e4a36f41SAndroid Build Coastguard Worker# kexec loads a crashdump kernel into memory using the kexec_file_load syscall. 2*e4a36f41SAndroid Build Coastguard Workertype kexec, domain, coredomain; 3*e4a36f41SAndroid Build Coastguard Workertype kexec_exec, exec_type, file_type, system_file_type; 4*e4a36f41SAndroid Build Coastguard Worker 5*e4a36f41SAndroid Build Coastguard Worker# allow kexec to write into /dev/kmsg for logging 6*e4a36f41SAndroid Build Coastguard Workerallow kexec kmsg_device:chr_file w_file_perms; 7*e4a36f41SAndroid Build Coastguard Worker 8*e4a36f41SAndroid Build Coastguard Worker# kexec is launched by microdroid_manager with fork/execvp. 9*e4a36f41SAndroid Build Coastguard Workerallow kexec microdroid_manager:fd use; 10*e4a36f41SAndroid Build Coastguard Worker 11*e4a36f41SAndroid Build Coastguard Worker# allow kexec to have SYS_BOOT 12*e4a36f41SAndroid Build Coastguard Workerallow kexec self:capability sys_boot; 13*e4a36f41SAndroid Build Coastguard Worker 14*e4a36f41SAndroid Build Coastguard Worker# allow kexec to write kmsg_debug 15*e4a36f41SAndroid Build Coastguard Workerallow kexec kmsg_debug_device:chr_file w_file_perms; 16