commit 3101bfd4da273509fc8da8d9348528eefa3d5635
author Jameson Thies <jthies@google.com> Tue Sep 27 16:47:19 2022 +0000
committer Chromeos LUCI <chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com> Mon Oct 10 16:38:57 2022 +0000
tree d3d596a541aec2daf7729e5226d95864f7a07e83
parent 5cd921207ab39ba5ba92c2d356b8f1970624d448

Add rgbkbd to fwupd's groups

Without rgbkbd in the fwupd user groups, only root is able to use fwupd
to update rgb keyboard firmware over dev paths accessible to the rgbkbd
group. Ideally, root should not be running fwupdtool. Adding rgbkbd to
fwupd's groups allows us to sandbox fwupdtool calls related to RGB
keyboard firmware updates so that they are run by the fwupd user.

BUG=b:247610461
TEST=groups fwupd

Cq-Depend: chromium:3922698
Change-Id: Ic43e9adaa029ab9e6ac89e5dfbc3b92ae876e23b
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/overlays/eclass-overlay/+/3922817
Commit-Queue: Jameson Thies <jthies@google.com>
Tested-by: Jameson Thies <jthies@google.com>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>