eclass: add devicejail user/group, cuse group

The cuse group will have access to /dev/cuse. We will
run device_jail and device_jail_fs as the device_jail
user in order to make sure we don't have root daemons
running around.

BUG=chromium:644338
TEST=build_packages, check /build/board

Change-Id: I6750ff0347d80558dc084ee30a5f227124496d24
Reviewed-on: https://chromium-review.googlesource.com/410061
Commit-Ready: Eric Caruso <ejcaruso@chromium.org>
Tested-by: Eric Caruso <ejcaruso@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>
3 files changed
tree: 15b9239341c97c7a32d1a9dccb524c6cad1f0308
  1. PRESUBMIT.cfg
  2. eclass/
  3. metadata/
  4. profiles/