acct-group/jobserver: Add group for system wide jobservers, v0

Add a dedicated group to control system-wide jobserver access, such
as the one provided by dev-build/steve.  This will replace the current
portage:portage ownership, and make it possible to grant users access
without giving them full portage group access.  Note that we don't want
open access to system-wide jobservers, as an untrusted user could then
grab all tokens and effectively block other processes from building.

Signed-off-by: Michał Górny <mgorny@gentoo.org>
Part-of: https://codeberg.org/gentoo/gentoo/pulls/2
Signed-off-by: Michał Górny <mgorny@gentoo.org>
This commit is contained in:
Michał Górny 2025-12-14 04:15:12 +01:00
parent f0aed8deeb
commit 3114d0425d
No known key found for this signature in database
GPG Key ID: 8E32347AF4055AE8
2 changed files with 17 additions and 0 deletions

View File

@ -0,0 +1,9 @@
# Copyright 2025 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
inherit acct-group
ACCT_GROUP_ID=556
DESCRIPTION="Access to system-wide jobservers"

View File

@ -0,0 +1,8 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<maintainer type="person">
<email>mgorny@gentoo.org</email>
<name>Michał Górny</name>
</maintainer>
</pkgmetadata>