{"action":"created","issue":{"url":"https://api.github.com/repos/cockpit-project/cockpit/issues/1595","labels_url":"https://api.github.com/repos/cockpit-project/cockpit/issues/1595/labels{/name}","comments_url":"https://api.github.com/repos/cockpit-project/cockpit/issues/1595/comments","events_url":"https://api.github.com/repos/cockpit-project/cockpit/issues/1595/events","html_url":"https://github.com/cockpit-project/cockpit/issues/1595","id":51919223,"number":1595,"title":"Support optional 'superuser' privilege escalation","user":{"login":"stefwalter","id":795070,"avatar_url":"https://avatars.githubusercontent.com/u/795070?v=3","gravatar_id":"","url":"https://api.github.com/users/stefwalter","html_url":"https://github.com/stefwalter","followers_url":"https://api.github.com/users/stefwalter/followers","following_url":"https://api.github.com/users/stefwalter/following{/other_user}","gists_url":"https://api.github.com/users/stefwalter/gists{/gist_id}","starred_url":"https://api.github.com/users/stefwalter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stefwalter/subscriptions","organizations_url":"https://api.github.com/users/stefwalter/orgs","repos_url":"https://api.github.com/users/stefwalter/repos","events_url":"https://api.github.com/users/stefwalter/events{/privacy}","received_events_url":"https://api.github.com/users/stefwalter/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/cockpit-project/cockpit/milestones/15","labels_url":"https://api.github.com/repos/cockpit-project/cockpit/milestones/15/labels","id":821068,"number":15,"title":"Protocol Cleanup","description":"Cleanup we should do in the protocol before we start saying it's stable.","creator":{"login":"stefwalter","id":795070,"avatar_url":"https://avatars.githubusercontent.com/u/795070?v=3","gravatar_id":"","url":"https://api.github.com/users/stefwalter","html_url":"https://github.com/stefwalter","followers_url":"https://api.github.com/users/stefwalter/followers","following_url":"https://api.github.com/users/stefwalter/following{/other_user}","gists_url":"https://api.github.com/users/stefwalter/gists{/gist_id}","starred_url":"https://api.github.com/users/stefwalter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stefwalter/subscriptions","organizations_url":"https://api.github.com/users/stefwalter/orgs","repos_url":"https://api.github.com/users/stefwalter/repos","events_url":"https://api.github.com/users/stefwalter/events{/privacy}","received_events_url":"https://api.github.com/users/stefwalter/received_events","type":"User","site_admin":false},"open_issues":7,"closed_issues":15,"state":"open","created_at":"2014-10-10T12:26:00Z","updated_at":"2015-01-19T18:58:20Z","due_on":null,"closed_at":null},"comments":1,"created_at":"2014-12-14T13:24:48Z","updated_at":"2015-01-29T10:05:41Z","closed_at":null,"body":"The bridge should support optional 'superuser' privilege escalation. Currently if it fails, the channel is closed. It should be possible to tell the channel to try to escalate privileges, and then go ahead and perform the action without that if escalation fails."},"comment":{"url":"https://api.github.com/repos/cockpit-project/cockpit/issues/comments/71998902","html_url":"https://github.com/cockpit-project/cockpit/issues/1595#issuecomment-71998902","issue_url":"https://api.github.com/repos/cockpit-project/cockpit/issues/1595","id":71998902,"user":{"login":"stefwalter","id":795070,"avatar_url":"https://avatars.githubusercontent.com/u/795070?v=3","gravatar_id":"","url":"https://api.github.com/users/stefwalter","html_url":"https://github.com/stefwalter","followers_url":"https://api.github.com/users/stefwalter/followers","following_url":"https://api.github.com/users/stefwalter/following{/other_user}","gists_url":"https://api.github.com/users/stefwalter/gists{/gist_id}","starred_url":"https://api.github.com/users/stefwalter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stefwalter/subscriptions","organizations_url":"https://api.github.com/users/stefwalter/orgs","repos_url":"https://api.github.com/users/stefwalter/repos","events_url":"https://api.github.com/users/stefwalter/events{/privacy}","received_events_url":"https://api.github.com/users/stefwalter/received_events","type":"User","site_admin":false},"created_at":"2015-01-29T10:05:41Z","updated_at":"2015-01-29T10:05:41Z","body":"This is likely necessary for docker without the 'docker' group. We want to try and escalate permissions using polkit, if the user is in the wheel group, but if that fails we should just try to access the docker socket as ourselves."}}