eclipse-iceoryx / eclipse-iceoryx/iceoryx
Can a non-sudo subscriber communicate with a sudo-run RouDi and publisher
Nobody has claimed this yet.
- Dominant language
- C++
- Stars
- 2.2k
- Forks
- 492
- Avg merge
- 18h 57m
- Merged PRs (30d)
- 1
Description
Issue Title: Question about process permissions: Can a non-sudo subscriber communicate with a sudo-run RouDi and publisher?
Issue Body:
Hello iceoryx team,
I have a question regarding the recommended permission model for iceoryx processes.
Scenario:
- I start
iox-roudiusingsudo. - I start a publisher application using
sudo. - I then try to start a subscriber application without
sudo(as a regular user).
Question:
Is this mixed-permission setup (i.e., some processes running with sudo and others without) a supported and viable way for communication?
Or is it required that all communicating processes (RouDi, publishers, and subscribers) must run with consistent permissions (e.g., all as the same non-root user, or all with sudo)?
I'd appreciate any clarification on whether this is supposed to work and what the best practice is.
Thank you!
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names no files, tests, or entry points. Start by tracing how iox-roudi, publishers, and subscribers handle process permissions, then document whether the described sudo and non-sudo combination is supported and what permission model users should follow.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- operating-systems, security
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100