IntelLabs / IntelLabs/tdx-workload-attestation
tdx::linux::device::is_available should check for user privilege
- Dominant language
- Rust
- Stars
- 13
- Forks
- 4
- Avg merge
- 6d 4h
- Merged PRs (30d)
- 3
Description
The `tdx::linux::device::is_available_function()` function checks whether the Linux KVM device exists in a TD guest. This operation needs `sudo` privileges to succeed, but currently throws an error. Instead, this function should check for permissions if a user is running the command from an unprivileged account.
_Originally posted by @sandlbn in https://github.com/IntelLabs/tdx-workload-attestation/pull/1#discussion_r2065359377_
Contributor guide
Research direction
Start by reading tdx::linux::device::is_available_function() and trace how it checks for the Linux KVM device. Compare its behavior for privileged and unprivileged users, then verify that an unprivileged account receives a permission check rather than an error when the device is available.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux, rust
- Domain
- operating-systems, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100