Can you just access /dev/mem or load a kernel module? Is there a SELinux policy stopping that?
If you can do either of those, it should be trivial to get kexec working by just loading it as a module.
If you can do either of those, it should be trivial to get kexec working by just loading it as a module.