eProsima / Micro-XRCE-DDS

An XRCE DDS implementation. Looking for commercial support? Contact info@eprosima.com
Apache License 2.0
156 stars 17 forks source link

Some questions on security of micro-ros #88

Closed vibnwis closed 3 years ago

vibnwis commented 3 years ago

Hi there, From https://micro.ros.org/docs/overview/ROS_2_feature_comparison/, I read about the following items which quite unclear to my understanding.

  1. Would someone please explain the concepts of "logging"? I read about " Logging | ∗ | Could be available as part of the standard logging mechanism in principle but not supported by Micro-XRCE-DDS due to dynamic message size. To be checked …"

  2. The other statement, "Security is not yet supported in the communication process between the Client and the Agent. However, the micro-ROS Agent can benefit from Fast DDS security capabilities during the creation of DDS entities. Roadmap: Implementation of security mechanisms in Micro XRCE-DDS are planned for future releases." Has this been implemented? if not, at what stage is it in? when it will be available? Sorry I would like to make a comment of the security of micro-ROS in my report. Hence, it would need to be accurate.

Thank you vi

pablogs9 commented 3 years ago

Hello:

  1. ROS 2 internal layers have implemented some logging functionality using files, stdout, and DDS. In micro-ROS we have removed some of these functionalities in order to make a lighter runtime operation. In this sentence, we also mention dynamic memory, usually, when handling strings in the micro-ROS internal stack (rcl, rcutils...) dynamic memory is used, so in order to avoid it, logging has been disabled.
  2. No security mechanism has been implemented in Micro XRCE-DDS. The standard does not provide any security highlight beyond using "secured transport layers" such as TLS. Regarding the FastDDS security, you can find more information here.