ROS Resources: Documentation | Support | Discussion Forum | Index | Service Status | ros @ Robotics Stack Exchange
Ask Your Question
1

How to use rostopic on SROS2 protected topics

asked 2021-08-27 03:20:22 -0600

tomteng gravatar image

May I know if it's possible to get the info related to an SROS2 protected topic? For instance, if I use ros2 topic list, I can only see the available topics. Is it possible for me to list the topics protected by SROS in case that I have the security enclave files?

edit retag flag offensive close merge delete

Comments

I have the same question, would be nice to have some answer from the SROS or ROS CLI Team, if this is even possible or considered to work?

My guess why it might not be considered. Disable security for the system while monitoring it. Or other way around enable security only on production level systems where you don't need to do rostopic commands.

wienans gravatar image wienans  ( 2022-12-12 07:59:27 -0600 )edit

You should be able to make yourself an admin enclave with access to all topics and services and pass that enclave to your CLI tools. Example of a policy accessing all topics/services https://github.com/ros-swg/turtlebot3...

marguedas gravatar image marguedas  ( 2022-12-12 15:48:54 -0600 )edit

Hi @margedas The problem is not the enclave but passing it to CLI, as —ros-args does not work with these cli tools

wienans gravatar image wienans  ( 2022-12-12 23:44:42 -0600 )edit

Oh I see, there use to be an environment variable allowing to override the enclave used ROS_SECURITY_ENCLAVE_OVERRIDE: https://github.com/ros2/design/blob/1...

marguedas gravatar image marguedas  ( 2022-12-13 00:12:06 -0600 )edit

@marguedas Thanks that works without a problem :) @tomteng this can be marked as answer to the question

wienans gravatar image wienans  ( 2022-12-13 01:27:45 -0600 )edit

1 Answer

Sort by » oldest newest most voted
1

answered 2022-12-14 13:58:29 -0600

marguedas gravatar image

You should be able to make yourself an admin enclave with access to all topics and services and pass that enclave to your CLI tools. Example of a policy accessing all topics/services https://github.com/ros-swg/turtlebot3...

Edit:

The problem is not the enclave but passing it to CLI, as —ros-args does not work with these cli tools

Oh I see, there use to be an environment variable allowing to override the enclave used ROS_SECURITY_ENCLAVE_OVERRIDE: https://github.com/ros2/design/blob/1...


Could not convert above comments to answer so I reposted them as an answer :/

edit flag offensive delete link more

Comments

Hi @marguedas, I try to use the environment variable ROS_SECURITY_ENCLAVE_OVERRIDE, but the ros2 topic list return null, I think we should add --no-daemon behind the command sometimes. :)

my English is poor,sry :(

yangsho gravatar image yangsho  ( 2023-02-20 19:53:57 -0600 )edit

Question Tools

1 follower

Stats

Asked: 2021-08-27 03:20:22 -0600

Seen: 164 times

Last updated: Dec 14 '22