# $Revision: 1.7 $ $Date: 2019-08-18 19:46:01-04 $
# $UUID: 1a70c84d-b8d9-4634-9670-699e7ba4046c $
#
# /sbin/kexec needs:
#   - open access on the file /proc/kallsyms
#   - write access on the chr_file /dev/pts/0

module mykexec 1.7;

require {
    type system_map_t;
    type devpts_t;
    type kdump_t;
    class chr_file write;
    class file { getattr open read };
}

#============= kdump_t ==============
allow kdump_t devpts_t:chr_file write;
allow kdump_t system_map_t:file { getattr open read };
