shill: vpn: Add vpn user and group

VPN clients in shill will be run as vpn:vpn. Also add shill to the vpn
group and thus shill could modify the config files that will be read by

This user is going to replace "openvpn" and "ipsec" users for running
the corresponding clients.


Cq-Depend: chromium:2717251
Change-Id: I1893b5aca043400c8d20ca1060e86d68abb3bdd2
Tested-by: Jie Jiang <>
Reviewed-by: Jorge Lucangeli Obes <>
Reviewed-by: Hugo Benichi <>
Commit-Queue: Jie Jiang <>
diff --git a/profiles/base/accounts/group/vpn b/profiles/base/accounts/group/vpn
new file mode 100644
index 0000000..1bfc2c2
--- /dev/null
+++ b/profiles/base/accounts/group/vpn
@@ -0,0 +1,5 @@
+# Members of this group have access to the files used by VPN clients
+# (e.g., configuration files)
diff --git a/profiles/base/accounts/user/vpn b/profiles/base/accounts/user/vpn
new file mode 100644
index 0000000..2236ba3
--- /dev/null
+++ b/profiles/base/accounts/user/vpn
@@ -0,0 +1,6 @@
+gecos:CrOS VPN clients