mirror of
https://github.com/clearlinux/graphene.git
synced 2026-09-03 20:31:40 +00:00
Jia Zhang
e9b988136d
The new option specifies the file check policy, determining how and which files can be opened. Previously, there were only two strict options: sgx.trusted_files and sgx.allowed_files, but they are not flexible enough (e.g., unknown files are never allowed). This commit introduces two policies: - allow_all_but_log allows files other than trusted/allowed files to be opened but outputs a warning message. This is a convenient way to debug applications. - strict disallows all files other than trusted/allowed files (just like the previous logic).
2 lines
17 B
Plaintext
2 lines
17 B
Plaintext
unknown_testfile
|