Re: Proposal for PR 13128

[fche at redhat dot com (Frank Ch. Eigler)]

Hi, Dave -

> With regard to http://sourceware.org/bugzilla/show_bug.cgi?id=13128

Thanks for posting your ideas.

> [...]
> --unprivileged[=stapusr|stapdev]

Or a new option --privilege=stapdev|stapkern|stapusr, with
--unprivileged equivalent to --privilege=stapusr.  "stapkern" is the
least bad of my ideas as to what to call this intermediate level.


> We can use the same mechanism up to step 3 for the new privilege
> level. At step 4, staprun will still verify the module's signature,
> however staprun now also needs to know for which privilege level the
> module was approved. [...]

Actually, it doesn't.  Since it's signed, staprun can trust the module
to do the verification itself.  It could just pass bit-flags as to the
invoking user's stapdev|stapkern|stapusr group memberships, and let
the module itself assess eligibility to run.

- FChE