Read device-mapper state and the multipathd control socket as root.
multipath.topologymultipath.configmultipath.daemon_pathsmultipath.daemon_maps
Run the Emisar service as root
sudo install -d -m 0755 /etc/systemd/system/emisar.service.d printf '%s\n' '[Service]' 'User=root' 'Group=root' | sudo tee /etc/systemd/system/emisar.service.d/10-multipath-host-access.conf >/dev/null sudo systemctl daemon-reload sudo systemctl restart emisar
test "$(systemctl show emisar --property=User --value)" = root
Impact: Every Emisar action on this runner executes as root and can reach host block devices and the multipath daemon, including actions from other installed packs.