Add arc-camera user/group and add it to video group.
arc-camera group can access /var/run/camera. video group can access
/dev/video*. Android media server belongs to arc-camera group. ARC
camera service runs as arc-camera user, which belongs to arc-camera
group and video group. So media server and ARC camera service can
use the socket in /var/run/camera to do IPC. Only ARC camera service
can access the camera device.
BUG=b:26311820
TEST=Verify on device that arc-camera has been added to /etc/{passwd,group}
and video group has arc-camera as a member.
CQ-DEPEND=CL:320853
Change-Id: I8480197e790094b78cfa2a43deb8ca0b9d1e49f7
Reviewed-on: https://chromium-review.googlesource.com/320067
Commit-Ready: Sheng-hao Tsao <shenghao@google.com>
Tested-by: Sheng-hao Tsao <shenghao@google.com>
Reviewed-by: Wu-cheng Li <wuchengli@chromium.org>
diff --git a/profiles/base/accounts/group/arc-camera b/profiles/base/accounts/group/arc-camera
new file mode 100644
index 0000000..4a0c068
--- /dev/null
+++ b/profiles/base/accounts/group/arc-camera
@@ -0,0 +1,3 @@
+group:arc-camera
+gid:274
+users:
diff --git a/profiles/base/accounts/group/video b/profiles/base/accounts/group/video
index 3aca68a..379316e 100644
--- a/profiles/base/accounts/group/video
+++ b/profiles/base/accounts/group/video
@@ -1,3 +1,5 @@
group:video
gid:27
-users:root,chronos,xorg
+# Modifying users here might be overwritten by freon overlay.
+# You probably want to modify both here and freon.
+users:root,chronos,arc-camera,xorg
diff --git a/profiles/base/accounts/user/arc-camera b/profiles/base/accounts/user/arc-camera
new file mode 100644
index 0000000..851ff7e
--- /dev/null
+++ b/profiles/base/accounts/user/arc-camera
@@ -0,0 +1,6 @@
+user:arc-camera
+uid:274
+gid:274
+gecos:CrOS ARC camera service daemon
+home:/dev/null
+shell:/bin/false
