commit 2b61759681446cc86f8edf8441cc5d8ca84aea71
author Chirantan Ekbote <chirantan@chromium.org> Mon Feb 25 19:53:07 2019
committer chrome-bot <chrome-bot@chromium.org> Tue Feb 26 02:45:28 2019
tree db20e505ecab3a87d69feb6f3942fb7ba3be6b03
parent e51874252cc4a5afc1b4c4d4f45b6d85be85347c

Map the chronos-access group into the container

The Downloads folder has permissions 0710, with the group set to
chronos-access (gid 1001).  This group is not mapped into the container,
which leads to the Downloads folder having the "nobody" group.  This
prevents the root user from inside the container from accessing the
files in the Downloads directory.

Create the chronos-access group inside the container and identity map in
gid 1001 so that the root user inside the container still has access to
the contents of Downloads.

BUG=chromium:925834
TEST=`sudo ls /mnt/chromeos/MyFiles/Downloads/foo.txt` works inside the
     container

Change-Id: I2cbbf381ffe8b1171e5517555e8dc897f7f2add3
Reviewed-on: https://chromium-review.googlesource.com/1487110
Commit-Ready: ChromeOS CL Exonerator Bot <chromiumos-cl-exonerator@appspot.gserviceaccount.com>
Tested-by: Chirantan Ekbote <chirantan@chromium.org>
Reviewed-by: Stephen Barber <smbarber@chromium.org>