Add kerberosd-exec user and group

In order to prevent exploits in third-party code from accessing password
information, the Kerberos daemon will run third-party code as
kerberosd-exec user in a separate process and prevent it from switching
back.

BUG=chromium:973391
TEST=None

Cq-Depend: chromium:1655314
Change-Id: I2da6c00bc6449242236a27111afc90d5273aa300
Reviewed-on: https://chromium-review.googlesource.com/1655609
Tested-by: Lutz Justen <ljusten@chromium.org>
Commit-Ready: Lutz Justen <ljusten@chromium.org>
Legacy-Commit-Queue: Commit Bot <commit-bot@chromium.org>
Reviewed-by: Lutz Justen <ljusten@chromium.org>
2 files changed
tree: 589afa9f8aac4328aa6fe95ae7e325cd5139aeb7
  1. eclass/
  2. metadata/
  3. profiles/
  4. PRESUBMIT.cfg