accounts: Add drm_dp_aux group and related users+groups.
Added:
drm_dp_aux group - will give access to /dev/drm_dp_aux*
fwupdate-drm_dp_aux user+group - for firmware updaters that use drm_dp_aux devices
fwupdate-drm_dp_aux-i2c user+group - for firmware updaters that use drm_dp_aux and i2c devices
A pending firmware updater will use the fwupdate-drm_dp_aux-i2c user
for access to both /dev/drm_dp_aux* and /dev/i2c-* devices.
While the fwupdate-drm_dp_aux user will initially be unused,
its existence should encourage selecting a fwupdate-<something> user with
the minimal necessary permissions, should a new firmware updater be added
that needs access to /dev/drm_dp_aux* but not /dev/i2c-* .
BUG=b:112485400
TEST=Built OS image with new firmware updater run under
fwupdate-drm_dp_aux-i2c user, installed on DUT, flashed non-target firmware
on DUT, rebooted to trigger firmware update, the firmware update succeeded
using fwupdate-drm_dp_aux-i2c user.
Cq-Depend: chromium:2033704
Change-Id: If3c494e43fc2d861a87147f236c0ac46f3b49171
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/overlays/eclass-overlay/+/2033497
Tested-by: Matthew Blecker <matthewb@chromium.org>
Reviewed-by: Allen Webb <allenwebb@google.com>
Reviewed-by: Bob Moragues <moragues@chromium.org>
Commit-Queue: Matthew Blecker <matthewb@chromium.org>
diff --git a/profiles/base/accounts/group/drm_dp_aux b/profiles/base/accounts/group/drm_dp_aux
new file mode 100644
index 0000000..eb5f772
--- /dev/null
+++ b/profiles/base/accounts/group/drm_dp_aux
@@ -0,0 +1,5 @@
+group:drm_dp_aux
+gid:407
+# fwupdate-drm_dp_aux: For firmware updater utilities that use /dev/drm_dp_aux* devices.
+# fwupdate-drm_dp_aux-i2c: For firmware updater utilities that use /dev/drm_dp_aux* and /dev/i2c-* devices.
+users:fwupdate-drm_dp_aux,fwupdate-drm_dp_aux-i2c
diff --git a/profiles/base/accounts/group/fwupdate-drm_dp_aux b/profiles/base/accounts/group/fwupdate-drm_dp_aux
new file mode 100644
index 0000000..656f97a
--- /dev/null
+++ b/profiles/base/accounts/group/fwupdate-drm_dp_aux
@@ -0,0 +1,3 @@
+group:fwupdate-drm_dp_aux
+gid:20144
+users:fwupdate-drm_dp_aux
diff --git a/profiles/base/accounts/group/fwupdate-drm_dp_aux-i2c b/profiles/base/accounts/group/fwupdate-drm_dp_aux-i2c
new file mode 100644
index 0000000..faff9da
--- /dev/null
+++ b/profiles/base/accounts/group/fwupdate-drm_dp_aux-i2c
@@ -0,0 +1,3 @@
+group:fwupdate-drm_dp_aux-i2c
+gid:20145
+users:fwupdate-drm_dp_aux-i2c
diff --git a/profiles/base/accounts/group/i2c b/profiles/base/accounts/group/i2c
index 10f2c7f..bafc667 100644
--- a/profiles/base/accounts/group/i2c
+++ b/profiles/base/accounts/group/i2c
@@ -1,6 +1,6 @@
group:i2c
gid:404
-# fwupdate-i2c: For firmware updater utilities that use the i2c-dev interface.
-# power: Give the power manager access to I2C devices so it can adjust external
-# displays' brightness via DDC.
-users:fwupdate-i2c,power
+# fwupdate-drm_dp_aux-i2c: For firmware updater utilities that use /dev/drm_dp_aux* and /dev/i2c-* devices.
+# fwupdate-i2c: For firmware updater utilities that use /dev/i2c-* devices.
+# power: Give the power manager access to I2C devices so it can adjust external display brightness via DDC.
+users:fwupdate-drm_dp_aux-i2c,fwupdate-i2c,power
diff --git a/profiles/base/accounts/user/fwupdate-drm_dp_aux b/profiles/base/accounts/user/fwupdate-drm_dp_aux
new file mode 100644
index 0000000..98b3ffd
--- /dev/null
+++ b/profiles/base/accounts/user/fwupdate-drm_dp_aux
@@ -0,0 +1,6 @@
+user:fwupdate-drm_dp_aux
+uid:20144
+gid:20144
+gecos:user for firmware update utilities that use /dev/drm_dp_aux*
+home:/dev/null
+shell:/bin/false
diff --git a/profiles/base/accounts/user/fwupdate-drm_dp_aux-i2c b/profiles/base/accounts/user/fwupdate-drm_dp_aux-i2c
new file mode 100644
index 0000000..2c6e339
--- /dev/null
+++ b/profiles/base/accounts/user/fwupdate-drm_dp_aux-i2c
@@ -0,0 +1,6 @@
+user:fwupdate-drm_dp_aux-i2c
+uid:20145
+gid:20145
+gecos:user for firmware update utilities that use /dev/drm_dp_aux* and /dev/i2c-*
+home:/dev/null
+shell:/bin/false
