eclass-overlay: defunc user 'ipsec'
All its functionalities are moved to user 'vpn' instead.
BUG=b:177984585
TEST=tested with crrev/c/2972334
Cq-Depend: chromium:2972185, chromium:2972334, chromium:2970819
Change-Id: If05697a2ce5c4f9758ad0d830aaa92d82bd5a9e6
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/overlays/eclass-overlay/+/2972335
Reviewed-by: Hugo Benichi <hugobenichi@google.com>
Reviewed-by: Garrick Evans <garrick@chromium.org>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>
Tested-by: Taoyu Li <taoyl@chromium.org>
Commit-Queue: Taoyu Li <taoyl@chromium.org>
diff --git a/profiles/base/accounts/group/chronos-access b/profiles/base/accounts/group/chronos-access
index e3cea79..94a4447 100644
--- a/profiles/base/accounts/group/chronos-access
+++ b/profiles/base/accounts/group/chronos-access
@@ -4,4 +4,4 @@
# mostly system daemons running as a non-chronos user, group permissions
# to access files/directories owned by chronos.
# This includes all users accessing opencryptoki database files.
-users:root,ipsec,chronos,cros-disks,imageloaderd,crash,dlp,image-burner
+users:root,vpn,chronos,cros-disks,imageloaderd,crash,dlp,image-burner
diff --git a/profiles/base/accounts/group/ipsec b/profiles/base/accounts/group/ipsec
index b69189f..6324f46 100644
--- a/profiles/base/accounts/group/ipsec
+++ b/profiles/base/accounts/group/ipsec
@@ -2,4 +2,5 @@
gid:212
# Prepare to run shill as non-root user 'shill', but let it chgrp() files to
# 'ipsec'.
-users:shill
+users:
+defunct:true
diff --git a/profiles/base/accounts/group/pkcs11 b/profiles/base/accounts/group/pkcs11
index 54e0a70..a74b556 100644
--- a/profiles/base/accounts/group/pkcs11
+++ b/profiles/base/accounts/group/pkcs11
@@ -1,4 +1,4 @@
group:pkcs11
gid:208
# These users all need access to PKCS #11 crypto services.
-users:root,ipsec,chronos,chaps,wpa,attestation
+users:root,vpn,chronos,chaps,wpa,attestation
diff --git a/profiles/base/accounts/group/shill b/profiles/base/accounts/group/shill
index 7fe6d71..f0b9000 100644
--- a/profiles/base/accounts/group/shill
+++ b/profiles/base/accounts/group/shill
@@ -1,3 +1,3 @@
group:shill
gid:20104
-users:shill,ipsec
+users:shill,vpn
diff --git a/profiles/base/accounts/user/ipsec b/profiles/base/accounts/user/ipsec
index 4cd53af..799591a 100644
--- a/profiles/base/accounts/user/ipsec
+++ b/profiles/base/accounts/user/ipsec
@@ -4,3 +4,4 @@
gecos:strongswan, other ipsec VPNs
home:/dev/null
shell:/bin/false
+defunct:true
