config/chroot_local-hooks/05-adduser_tails-persistent-storage

   1 #!/bin/sh
   2
   3 set -e
   4
   5 # Create the tails-persistent-storage user.
   6 #
   7 # We start the tps-frontend program as this user, which allows us to give it
   8 # the privilege to connect to the tps backend, which we don't want to give to
   9 # the desktop user.
  10 #
  11 # We also create the persistence.conf and live-additional-software.conf files
  12 # as owned by this user, to stay fully compatible with older Tails versions,
  13 # which expect those files to be owned by that user.
  14 #
  15 # The UID and GID for this user and group need to remain the same (respectively:
  16 # 115 and 122) across Tails releases. If these UID and GID changed:
  17 #  - when enabling a persistent volume, persistence configuration files
  18 #    created with older Tails versions would be treated as unsafe and
  19 #    thus disabled;
  20 #  - Older Tails versions would be able to modify the Persistent Storage
  21 #    configuration
  22
  23 echo "Creating the tails-persistent-storage user"
  24
  25 # If this fails because UID 115 or GID 122 are already in use,
  26 # move the "stealer" user/group out of the way in 04-change-gids-and-uids.
  27
  28 addgroup --system --gid 122 tails-persistent-storage
  29 adduser --system --uid 115 --gid 122 --no-create-home tails-persistent-storage