acct-group/cuse: New group, v0

New group for /dev/cuse.  Unlike /dev/fuse, we don't want this device
to be world-accessible because of potential security concerns, starting
with the fact that CUSE is not widely tested, and ending with
CVE-2016-1233 which indicates that programs using CUSE can modify memory
of processes opening CUSE devices.

Bug: https://bugs.gentoo.org/967033
Signed-off-by: Michał Górny <mgorny@gentoo.org>
Part-of: https://codeberg.org/gentoo/gentoo/pulls/2
Signed-off-by: Michał Górny <mgorny@gentoo.org>
This commit is contained in:
Michał Górny 2025-12-13 19:26:25 +01:00
parent 4d945888c6
commit 55f758b29f
No known key found for this signature in database
GPG Key ID: 8E32347AF4055AE8
2 changed files with 20 additions and 0 deletions

View File

@ -0,0 +1,9 @@
# Copyright 2025 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
inherit acct-group
ACCT_GROUP_ID=554
DESCRIPTION="/dev/cuse access"

View File

@ -0,0 +1,11 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<maintainer type="person">
<email>mgorny@gentoo.org</email>
<name>Michał Górny</name>
</maintainer>
<maintainer type="project">
<email>base-system@gentoo.org</email>
</maintainer>
</pkgmetadata>