Add a 'preserve' group.
This group is intended to gate write access to
/mnt/stateful_partition/unencrypted/preserve.
BUG=chrome-os-partner:46244
TEST=manual
Change-Id: Icd76a799bae76024ec15abe860ad7aa44c8d45fa
Reviewed-on: https://chromium-review.googlesource.com/315817
Commit-Ready: Darren Krahn <dkrahn@chromium.org>
Tested-by: Darren Krahn <dkrahn@chromium.org>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
diff --git a/profiles/base/accounts/group/preserve b/profiles/base/accounts/group/preserve
new file mode 100644
index 0000000..ec0ab23
--- /dev/null
+++ b/profiles/base/accounts/group/preserve
@@ -0,0 +1,4 @@
+group:preserve
+gid:253
+# Only certain users are allowed to write to /mnt/stateful/unencrypted/preserve.
+users:root,attestation,tpm_manager
