tree d3d596a541aec2daf7729e5226d95864f7a07e83
parent 5cd921207ab39ba5ba92c2d356b8f1970624d448
author Jameson Thies <jthies@google.com> 1664297239 +0000
committer Chromeos LUCI <chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com> 1665419937 +0000

Add rgbkbd to fwupd's groups

Without rgbkbd in the fwupd user groups, only root is able to use fwupd
to update rgb keyboard firmware over dev paths accessible to the rgbkbd
group. Ideally, root should not be running fwupdtool. Adding rgbkbd to
fwupd's groups allows us to sandbox fwupdtool calls related to RGB
keyboard firmware updates so that they are run by the fwupd user.

BUG=b:247610461
TEST=groups fwupd

Cq-Depend: chromium:3922698
Change-Id: Ic43e9adaa029ab9e6ac89e5dfbc3b92ae876e23b
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/overlays/eclass-overlay/+/3922817
Commit-Queue: Jameson Thies <jthies@google.com>
Tested-by: Jameson Thies <jthies@google.com>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>