MiG Runtime Manager Secure hosting of runtime environments without root intervention

Problem We have special runtime environments that are ‘nice to have’ as permanent RE’s but not important enough that system administrators will install them! Generecon is such an application!

Proposal System administrators can choose to create an additional user ‘MiG Package Manager’ All MiG users should share a group We can then install packages with this user and allow group read and execute on these packages

Advantages This is secure –MiG users can use the packages but never change them It is still non-intrusive –First of all it’s optional –Even if the resource does this it’s nothing that does not already exist on the system –And it’s very easy

Path forward Is this the right approach –Anything I have overlooked? This should be limited to the configuration part? Easy?