Instead of running kpatch with sudo per https://github.com/aliceinwire/elivepatch-client/blob/master/elivepatch_client/patch.py#L71, it should check for the required capabilities at the beginning (uid or CAP_SYS_MODULE, depending on what kpatch requires) and exit if the current capabilities are not sufficient.
Instead of running kpatch with sudo per https://github.com/aliceinwire/elivepatch-client/blob/master/elivepatch_client/patch.py#L71, it should check for the required capabilities at the beginning (uid or CAP_SYS_MODULE, depending on what kpatch requires) and exit if the current capabilities are not sufficient.