IntelLabs / IntelLabs/tdx-workload-attestation

tdx::linux::device::is_available should check for user privilege

Open
#3 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
13
Forks
4
Avg merge
6d 4h
Merged PRs (30d)
3

Description

The `tdx::linux::device::is_available_function()` function checks whether the Linux KVM device exists in a TD guest. This operation needs `sudo` privileges to succeed, but currently throws an error. Instead, this function should check for permissions if a user is running the command from an unprivileged account.

_Originally posted by @sandlbn in https://github.com/IntelLabs/tdx-workload-attestation/pull/1#discussion_r2065359377_

Contributor guide

Open the contributing guide

Research direction

Start by reading tdx::linux::device::is_available_function() and trace how it checks for the Linux KVM device. Compare its behavior for privileged and unprivileged users, then verify that an unprivileged account receives a permission check rather than an error when the device is available.

Written by the indexing model from the issue text.

Assessment

Tech stack
linux, rust
Domain
operating-systems, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.