commit 70b8b51352f61d14a194c41fa37bbbd56fd3a146
author Andrey Pronin <apronin@google.com> Wed Aug 24 17:05:12 2016 -0700
committer chrome-bot <chrome-bot@chromium.org> Fri Sep 02 09:32:19 2016 -0700
tree e0e6675ca8c37a4b7f2eda4eec3ba78efb7d9b4c
parent 679b7f28680f44c8ea05727a34da861ab1691b5e

Add attestation to group pkcs11

Attestation daemon uses chaps for pkcs11 key store. Chaps daemon
accepts dbus messages only from group pkcs11.

CQ-DEPEND=CL:376038
BUG=chrome-os-partner:54712
BUG=chrome-os-partner:54710
TEST=on tpm2 board, run "attestation_client info --user=zzz", check log
     for "Chaps service is not available: Rejected send message" messages.

Change-Id: I79900c7656a2c9440d460c3eb1d6137947f77135
Reviewed-on: https://chromium-review.googlesource.com/375478
Commit-Ready: Andrey Pronin <apronin@chromium.org>
Tested-by: Andrey Pronin <apronin@chromium.org>
Reviewed-by: Darren Krahn <dkrahn@chromium.org>

profiles/base/accounts/group/pkcs11

diff --git a/profiles/base/accounts/group/pkcs11 b/profiles/base/accounts/group/pkcs11
index 9f99e95..54e0a70 100644
--- a/profiles/base/accounts/group/pkcs11
+++ b/profiles/base/accounts/group/pkcs11
@@ -1,4 +1,4 @@
 group:pkcs11
 gid:208
 # These users all need access to PKCS #11 crypto services.
-users:root,ipsec,chronos,chaps,wpa
+users:root,ipsec,chronos,chaps,wpa,attestation