On Tue, Sep 11, 2012 at 20:58, Michael W. Lucas wrote: > Hi, > > I'm attempting to permit a group of otherwise-unprivileged users to > build packages via sudo. You can see a post on my efforts at > http://blather.michaelwlucas.com/archives/1421 > > It seems that the ports system creates a directory, /tmp/portlocks, > owned by the user creating a port. I can change this directory to be > owned by my port-building group and writable by the group, but is > having these lockfiles writable by a group a problem? Is this effort > just something better not attempted?
Have you considered something using one account, portbuilder, and allowing minions to run sudo -u portbuilder make?