Add kerberosd-exec user and group
In order to prevent exploits in third-party code from accessing password
information, the Kerberos daemon will run third-party code as
kerberosd-exec user in a separate process and prevent it from switching
back.
BUG=chromium:973391
TEST=None
Cq-Depend: chromium:1655314
Change-Id: I2da6c00bc6449242236a27111afc90d5273aa300
Reviewed-on: https://chromium-review.googlesource.com/1655609
Tested-by: Lutz Justen <ljusten@chromium.org>
Commit-Ready: Lutz Justen <ljusten@chromium.org>
Legacy-Commit-Queue: Commit Bot <commit-bot@chromium.org>
Reviewed-by: Lutz Justen <ljusten@chromium.org>
2 files changed