1service microdroid_manager /system/bin/microdroid_manager
2    disabled
3    # print android log to kmsg
4    file /dev/kmsg w
5    # redirect stdout/stderr to kmsg_debug
6    stdio_to_kmsg
7    setenv RUST_LOG info
8    # TODO(jooyung) remove this when microdroid_manager becomes a daemon
9    oneshot
10    # CAP_SYS_BOOT is required to exec kexecload from microdroid_manager
11    # CAP_SETPCAP is required to allow microdroid_manager to drop capabilities
12    #   before executing the payload
13    capabilities AUDIT_CONTROL SYS_ADMIN SYS_BOOT SETPCAP SETUID SETGID
14    user root
15    socket vm_payload_service stream 0666 system system
16