tree 7cc782a9a0feae33e94657b6dc1ba83de98c9120
parent e13bdc96dd67549a44829a34ec80c1dda369b287
author Clark Chung <clarkchung@google.com> 1583382636 +0800
committer Commit Bot <commit-bot@chromium.org> 1583538116 +0000

hardware_verifier: add user and group entries.

In order to limit the capabilities while calling hardware_verifier
binary at upstart job, we add hardware_verifier user/group and invoke
binary with minijail.

BUG=b:147654337
TEST=emerge-$BOARD hardware_verifier

Change-Id: Iaf9baab810749a11440368fc95cc7e7df17145e9
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/overlays/eclass-overlay/+/2087555
Reviewed-by: Stimim Chen <stimim@chromium.org>
Reviewed-by: Chun-ta Lin (ping on chat if not responsive) <itspeter@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>
Tested-by: Chun-ta Lin (ping on chat if not responsive) <itspeter@chromium.org>
Commit-Queue: Clark Chung <ckclark@chromium.org>