1 type ramoops, domain, coredomain; 2 type ramoops_data_file, file_type, data_file_type; 3 type ramoops_exec, exec_type, file_type; 4 5 init_daemon_domain(ramoops); 6 7 # kmod=crypto-gcm(aes) 8 dontaudit ramoops kernel:system module_request; 9 10 allow ramoops ramoops_exec:file rx_file_perms; 11 allow ramoops shell_exec:file rx_file_perms; 12 allow ramoops toolbox_exec:file rx_file_perms; 13 14 # Set the sys.ramoops.decrypted property 15 set_prop(ramoops, ramoops_prop); 16 17 allow ramoops sysfs_pstore:file rw_file_perms; 18 allow ramoops ramoops_device:chr_file rw_file_perms; 19 allow ramoops ramoops_data_file:file create_file_perms; 20 allow ramoops ramoops_data_file:dir rw_dir_perms; 21