Add user and group for DLP daemon.
Add user and group for the new DLP daemon that will
restrict access to files protected by DLP policy.
The daemon will run only for managed users with the policy,
observe all accesses to user files and allow only the ones
that are explicitly allowed by Chrome.
BUG=chromium:1169747
TEST=Emerge and deploy
Cq-Depend: chromium:2643294, chromium:2644889
Change-Id: Ida1ecdef1f4bb676f246de20d5c2521e67bd87e7
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/overlays/eclass-overlay/+/2643295
Reviewed-by: Aya Elsayed <ayaelattar@chromium.org>
Reviewed-by: Mattias Nissler <mnissler@chromium.org>
Tested-by: Sergey Poromov <poromov@chromium.org>
Commit-Queue: Sergey Poromov <poromov@chromium.org>
diff --git a/profiles/base/accounts/group/dlp b/profiles/base/accounts/group/dlp
new file mode 100644
index 0000000..2672033
--- /dev/null
+++ b/profiles/base/accounts/group/dlp
@@ -0,0 +1,3 @@
+group:dlp
+gid:20173
+users:dlp
diff --git a/profiles/base/accounts/user/dlp b/profiles/base/accounts/user/dlp
new file mode 100644
index 0000000..05968da
--- /dev/null
+++ b/profiles/base/accounts/user/dlp
@@ -0,0 +1,6 @@
+user:dlp
+uid:20173
+gid:20173
+gecos:CrOS System-wide DLP daemon
+home:/dev/null
+shell:/bin/false
