clearlinux/graphene
2
0
Fork 0
mirror of https://github.com/clearlinux/graphene.git synced 2026-09-06 13:51:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

[Pal/Linux-SGX] Remove loader.nonpie_binary manifest option

Browse Source 
Non-PIE binaries support requires ELRANGE to start at low addresses,
which on older SGX drivers required root permissions or reconfiguring
the host, so this mapping strategy was made optional by us. This issue
was fixed long time ago, so we can drop this option and always start
enclaves at 0.
This commit is contained in:
Michał Kowalczyk
2021-01-13 17:13:29 +01:00
parent 6ff2f12906
commit a12f96f49e
49 changed files with 19 additions and 135 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Examples/python-scipy-insecure/python.manifest.template
-2
View File
@@ -65,8 +65,6 @@ sys.stack.size = "2M"
# SGX general options
sgx.nonpie_binary = 1
# Set the virtual memory size of the SGX enclave. For SGX v1, the enclave
# size must be specified during signing. If Python needs more virtual memory
# than the enclave size, Graphene will not be able to allocate it.