debugd: Access pstore via the pstore-access group

We need to access the pstore mount via the pstore-access group after
CL:3020561 which changed the group from debugd to pstore-access. Add the
default user and use the pstore-access group, similar to how we access
debugfs.

BUG=b:203444553
TEST=chrome://system#console-ramoops has data again

Disallow-recycled-builds: test-failures
Change-Id: Ic69ac56c2c63be21e48667837907719141f8ae10
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform2/+/3227705
Tested-by: Stephen Boyd <swboyd@chromium.org>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>
Commit-Queue: Stephen Boyd <swboyd@chromium.org>
(cherry picked from commit 2ba654066970af2323404fefe54261f8865c5919)
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform2/+/3243242
Bot-Commit: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com>
diff --git a/debugd/src/constants.cc b/debugd/src/constants.cc
index d58810b..b0e0e76 100644
--- a/debugd/src/constants.cc
+++ b/debugd/src/constants.cc
@@ -17,4 +17,6 @@
 
 const char kDebugfsGroup[] = "debugfs-access";
 
+const char kPstoreAccessGroup[] = "pstore-access";
+
 }  // namespace debugd
diff --git a/debugd/src/constants.h b/debugd/src/constants.h
index 6c1c813..ec262f9 100644
--- a/debugd/src/constants.h
+++ b/debugd/src/constants.h
@@ -15,6 +15,7 @@
 extern const char kDeviceCoredumpUploadFlagPath[];
 
 extern const char kDebugfsGroup[];
+extern const char kPstoreAccessGroup[];
 
 }  // namespace debugd
 
diff --git a/debugd/src/log_tool.cc b/debugd/src/log_tool.cc
index f9d69f8..00b9855 100644
--- a/debugd/src/log_tool.cc
+++ b/debugd/src/log_tool.cc
@@ -177,7 +177,8 @@
   // There might be more than one record, so grab them all.
   // Plus, for <linux-3.19, it's named "console-ramoops", but for newer
   // versions, it's named "console-ramoops-#".
-  {kGlob, "console-ramoops", "/sys/fs/pstore/console-ramoops*"},
+  {kGlob, "console-ramoops", "/sys/fs/pstore/console-ramoops*",
+    SandboxedProcess::kDefaultUser, kPstoreAccessGroup },
   {kFile, "cpuinfo", "/proc/cpuinfo"},
   {kFile, "cr50_version", "/var/cache/cr50-version"},
   {kFile, "cros_ec.log", "/var/log/cros_ec.log",