Participant Relationship Protocol

Back to matrix

D01-MT: Yes

Rationale

A documented Linux meshtasticd endpoint may run as a user with device permissions. The bounded witness is direct headless native execution with a compatible CH341 USB radio, user-owned state/configuration, explicit General.MACAddress, and only nonprivileged local ports (or disabled optional servers). Provision USB access administratively. Do not inherit the packaged service ambient CAP_NET_BIND_SERVICE; that default unit is not an unprivileged witness. No raw networking, display/GPIO helper or privileged service manager is credited as routine endpoint operation.

Assessment method

Documentary code/dependency analysis; no new execution or radio operation

Source context

Primary source and official installation review 2026-10-15

Outstanding qualification

Documentary execution-path finding, not a measured permission trace. Keep real LoRa, selected keys/policies and isolated state; privileged package installation and USB ACL provisioning are separate. Direct invocation without ambient capabilities is required.

Public sources