Add sepolicy for ACPI bert_collector
bert_collector is a deamon that runs at boot, collects ACPI BERT
reports and sends them to DropBox.
Adds bert_collector.te policy for bert_collector deamon permissions.
Adds sysfs_firmware_acpi_tables context for /sys/firmware/acpi/tables.
Adds property acpi.bert_collector.start for starting bert_collector.
Bug: 357626966
Test: m && atest bert_collector_test
Change-Id: I4c583f3a9121474235ea8c78f65b74df86936a0b
diff --git a/private/bert_collector.te b/private/bert_collector.te
new file mode 100644
index 0000000..b11bd76
--- /dev/null
+++ b/private/bert_collector.te
@@ -0,0 +1,12 @@
+type bert_collector, domain, coredomain;
+type bert_collector_exec, system_file_type, exec_type, file_type;
+
+init_daemon_domain(bert_collector)
+
+r_dir_file(bert_collector, sysfs_firmware_acpi_tables)
+
+binder_use(bert_collector)
+binder_call(bert_collector, system_server)
+
+allow bert_collector dropbox_service:service_manager find;
+allow bert_collector proc_version:file r_file_perms;