Script to check for blacklisted files as described in chrome-os-partner:1991

scripts/image_signing/ensure_no_nonrelease_files.config

Index: scripts/image_signing/ensure_no_nonrelease_files.config
diff --git a/scripts/image_signing/ensure_no_nonrelease_files.config b/scripts/image_signing/ensure_no_nonrelease_files.config
new file mode 100755
index 0000000000000000000000000000000000000000..1ca02f1a37b302fb2a8a6032c96033eb57273f8e
--- /dev/null
+++ b/scripts/image_signing/ensure_no_nonrelease_files.config
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+# Copyright (c) 2011 The Chromium OS Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+# Files/directories that should never be present in a clean,
+# standard release build. 
+RELEASE_FILE_BLACKLIST=(
+# Flag-file indicating "developer mode", crosh offers "shell" if present:
+/root/.dev_mode
+
+# Should not ship with a local account pre-set on the system
+/opt/google/chrome/localaccount
+
+# Generation of this should happen on-device. Don't want to introduce
+# any cryptohome-related weaknesses e.g. everyone using the same salt.
+/home/.shadow
+)