system-users-20170617-17.3.1

- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).

- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).

- Add qemu user to kvm group

- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf

- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group

- Use test -x instead of -f

- Call usermod only if installed

- Align /var/lib/tss permissions with trousers (boo#1162360).

- Add tss user for TPM tools (boo#1162360).

- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.

- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].

- Add cpacfstats, ts-shell, and zkeyadm groups for s390-tools (bsc#1123730)

- Add "render" group in system-group-hardware (bsc#1085847)
  "uaccess" tag has been dropped from /dev/dri/renderD* and these devices
  now have 0666 permsions by default is owned by the render group.

- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.

- uuidd does not need group daemon, Copy&Paste error.

- udev needs groups kvm and lp: [bsc#1058703]
  - Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware

- Add system-user-uuidd.conf (boo#1057937#c3).

- user nobody: move usermod to %post, else it will be executed
  before the user is created.

- Drop pkgconfig(systemd) BuildRequires: we no longer depend on
  systemd-sysusers, but converted to shadow toolset.

- Move group trusted into system-user-root package [bsc#1044014]

- Buildrequire the updated sysuser-tools which supports busybox-adduser as well

- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices. [bsc#1190572]