Commits on Sep 26, 2024

1. [LibOS] Move trusted and allowed files logic to LibOS …

   Now `gramine-direct` behaves similarly to `gramine-sgx`: it reads
   `sgx.allowed_files` and `sgx.trusted_files` arrays, as well as
   `sgx.file_check_policy`, and applies the corresponding file-access
   rules. Note that the names of the manifest options are kept the same
   for backward compatibility; a future commit will introduce new, more
   appropriate aliases.
   
   Several tests that were previously SGX PAL-specific only are now enabled
   on `gramine-direct` as well. All LTP tests, even though they are run
   under `gramine-direct` only, check the allowed/trusted files logic now.
   
   As the primary effect of this commit, the SGX PAL code is significantly
   simplified and is closer to the native Linux (`direct`) PAL code.
   
   Signed-off-by: Dmitrii Kuvaiskii <[email protected]>

   

   dimakuv committed Sep 26, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for aef087f
   • Browse repository at this point

   Copy the full SHA

   aef087f View commit details

   Browse the repository at this point in the history