Add users and groups for perfetto system service.
This change adds users/groups for running Perfetto system tracing
services:
* traced: for running the system trace service daemon.
* traced-probes: for running the system trace probes.
* traced-producer: the group controlling the access to the trace service
as a trace data source.
* traced-consumer: the group controlling the access to the trace service
for reading trace data.
BUG=b:147789115
TEST=Build and run on hatch
Cq-Depend: chromium:2533068
Change-Id: Id4fea4a605afd4318a3e9af8266fdbf714bc910e
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/overlays/eclass-overlay/+/2462798
Reviewed-by: Mattias Nissler <mnissler@chromium.org>
Commit-Queue: Chinglin Yu <chinglinyu@chromium.org>
Tested-by: Chinglin Yu <chinglinyu@chromium.org>
diff --git a/profiles/base/accounts/group/debugfs-access b/profiles/base/accounts/group/debugfs-access
index adb5a34..13e7abd 100644
--- a/profiles/base/accounts/group/debugfs-access
+++ b/profiles/base/accounts/group/debugfs-access
@@ -1,3 +1,3 @@
group:debugfs-access
gid:605
-users:arc-camera,shill,power,metrics
+users:arc-camera,shill,power,metrics,traced-probes
diff --git a/profiles/base/accounts/group/traced b/profiles/base/accounts/group/traced
new file mode 100644
index 0000000..9084508
--- /dev/null
+++ b/profiles/base/accounts/group/traced
@@ -0,0 +1,3 @@
+group:traced
+gid:20160
+users:traced
diff --git a/profiles/base/accounts/group/traced-consumer b/profiles/base/accounts/group/traced-consumer
new file mode 100644
index 0000000..b06429d
--- /dev/null
+++ b/profiles/base/accounts/group/traced-consumer
@@ -0,0 +1,10 @@
+# This group controls the access to the Perfettto system tracing service daemon
+# "traced" as a trusted consumer. Users in this group are permitted to send
+# control commands to the service daemon and read collected trace data back.
+# Users in this group:
+# * traced: the user to run the service daemon "traced".
+# * chronos: for running the "perfetto" command in the crosh shell or collect
+# trace using the Perfetto UI (ui.perfetto.dev).
+group:traced-consumer
+gid:20164
+users:traced,chronos
diff --git a/profiles/base/accounts/group/traced-probes b/profiles/base/accounts/group/traced-probes
new file mode 100644
index 0000000..399e0e5
--- /dev/null
+++ b/profiles/base/accounts/group/traced-probes
@@ -0,0 +1,3 @@
+group:traced-probes
+gid:20161
+users:traced-probes
diff --git a/profiles/base/accounts/group/traced-producer b/profiles/base/accounts/group/traced-producer
new file mode 100644
index 0000000..7979b98
--- /dev/null
+++ b/profiles/base/accounts/group/traced-producer
@@ -0,0 +1,11 @@
+# This group controls the access to the Perfettto system tracing service daemon
+# "traced" as a producer. Users in this group are permitted to receive control
+# commands from the service daemon and send trace data to the daemon as a trace
+# data source. Users in this group:
+# * traced: the user to run "traced" in.
+# * traced-probes: for the system probes "traced_probes" to send kernel ftrace
+# and other system trace data to traced.
+# * chronos: for Chrome to send Chrome trace data to traced.
+group:traced-producer
+gid:20162
+users:traced,traced-probes,chronos
diff --git a/profiles/base/accounts/user/traced b/profiles/base/accounts/user/traced
new file mode 100644
index 0000000..7b6be49
--- /dev/null
+++ b/profiles/base/accounts/user/traced
@@ -0,0 +1,6 @@
+user:traced
+uid:20160
+gid:20160
+gecos:Perfetto system tracing service
+home:/dev/null
+shell:/bin/false
diff --git a/profiles/base/accounts/user/traced-probes b/profiles/base/accounts/user/traced-probes
new file mode 100644
index 0000000..cd5063b
--- /dev/null
+++ b/profiles/base/accounts/user/traced-probes
@@ -0,0 +1,6 @@
+user:traced-probes
+uid:20161
+gid:20161
+gecos:Perfetto system tracing probes using debugfs, procfs and sysfs.
+home:/dev/null
+shell:/bin/false
