search

eclipse-iceoryx / iceoryx

Eclipse iceoryx™ - true zero-copy inter-process-communication
https://iceoryx.io
Apache License 2.0
1.62k stars 383 forks source link

Sparse access control documentation. #640

Closed ankitkk closed 3 years ago

ankitkk commented 3 years ago

Its not entirely clear how to setup such that iceoryx clients can be under different unix users/groups. A brief introduction would be helpful. Thanks.

elfenpiff commented 3 years ago

@mossmaurice you are currently working on the docu side, do you have time for this topic?

elfenpiff commented 3 years ago

I would suggest a short icedelivery based example where we have two publishers A, B and two subscribers X, Y with some groups so that A & X and B & Y are separated and cannot read the data of the non corresponding ports.

ankitkk commented 3 years ago

Looking through existing pull requests - it seems like Pull request in progress #630 already adds some color to it.

elBoberido commented 3 years ago

@ankitkk have a look at this https://github.com/eclipse-iceoryx/iceoryx/blob/master/doc/website/advanced/usage-guide.md

It shows how to configure RouDi for multiple user. It's quite long since I tried it, but theoretically you just need to start the application as different user and it should work if there is a segment for that user configured.

mossmaurice commented 3 years ago

Thanks @ankitkk for the feedback! We should definitely improve the documentation regarding users and groups.

I've add this point to #482 and will close this issue here. If you think other topics are not covered, please raise them in #482, thanks!