Files
graphene/Pal/regression/File.manifest.template
Don Porter 03cb0e0bb3 Address a TOCTTOU vulnerability in SGX read/map (#131)
* Fix a bug where configuration error ends up doing a huge allocation, rather than catching the error.  Add some documentation to the slabmgr code.

* Add a unit test and some documentation to answer the question in issue #107.  I can't see how offset and map_start would end up being different.

* Rewrite of SGX file_map to remove TOCTTTOU now passes all unit tests

* Apply a similar fix to file_read.  

* Factor complicated verification code into a common helper routine.

* Adjust the memory copying strategy so that all bits in the returned buffed are exactly the same bits as verified in the trusted, scratch buffer.

* Fixing the TOCTOU issue in file checking

* Adding comments for load_trusted_file() and copy_and_check_trusted_file(); Deprecate the old design

* Documenting the file checking mechanism
2018-06-25 07:54:40 -07:00

21 lines
494 B
Plaintext

# the executable to run
# loader.exec = file:./HelloWorld
# debug type: inline|file
loader.debug_type = inline
# debug as file
# loader.debug_file = <path>
fs.mount.root.uri = file:
# allow to bind on port 8000
net.allow_bind.1 = 127.0.0.1:8000
# allow to connect to port 8000
net.allow_peer.1 = 127.0.0.1:8000
sgx.trusted_files.tmp1 = file:File
sgx.trusted_files.tmp2 = file:../regression/File
sgx.allowed_files.tmp3 = file:file_nonexist.tmp
sgx.allowed_files.tmp4 = file:file_delete.tmp