D01-RI: Pending
Rationale
Linux 6.12 documents separate IEEE 802.15.4 management through netlink and 6LoWPAN interface provisioning, while the endpoint data path can use ordinary IPv6 UDP sockets. This narrows the privilege question but does not settle the selected complete leaf. RFC 6775 address registration has a lifetime and renewal procedure; RPL leaf signaling and any route/neighbor updates must also be assigned to an identified process. A userspace DTLS candidate and an unprivileged UDP socket alone do not establish who performs that recurring control work. RIOT now supplies a concrete alternate userspace-stack candidate: its native RPL tutorial uses TAP networking, and socket_zep exposes an IEEE 802.15.4 radio HAL through UDP encapsulation for simulation. Neither source alone demonstrates the selected physical IEEE 802.15.4 leaf with the required privilege boundary and exact DTLS profile.
Assessment method
Documentary privilege-boundary analysis; no runtime execution
Source context
Linux 6.12 network management documentation, Linux capabilities and 6LoWPAN neighbor registration
Outstanding qualification
Pin a concrete leaf executable and stock kernel configuration; trace initial PAN/channel/interface/address provisioning separately from sustained operation. Identify the owner and lifetime of ICMPv6/raw sockets, registration renewal, RPL signaling and route/neighbor updates. Linux CAP_NET_RAW controls raw-socket creation and CAP_NET_ADMIN covers network administration; document pre-opened descriptors, privilege drop or any persistent helper rather than assuming none. Then establish the selected DTLS 1.3 psk_ke/AES-128-GCM path with final-peer keys. Retained descriptors may avoid repeated privileged opens, but no exact full-stack leaf witness has been qualified here. No negative verdict or new runtime claim follows.
Public sources
- https://www.kernel.org/doc/html/v6.12/networking/ieee802154.html
- https://man7.org/linux/man-pages/man7/ipv6.7.html
- https://man7.org/linux/man-pages/man7/capabilities.7.html
- https://www.rfc-editor.org/rfc/rfc6775.html
- https://docs.riot-os.org/networking/rpl/
- https://api.riot-os.org/group__drivers__socket__zep.html
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round307-sources.json
- round322-sources.json
- round323-sources.json