allow init { domain -lmkd -crash_dump }:process noatsecure; allow init debugfs:file write;