Warning: file_map does not currently support writable pass-through mappings on SGX #1639
-
|
Hello! In order to better understand the problem, I did build a debug sgx enclave, and notice the following log output: Above is the relevant log section, and the error I guess is related with this line: And here is the manifest section with the allowed path: Is there any way to solve the problem? |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
|
The warning says it all: Gramine currently does not allow writable pass-through mappings on allowed files. First of all, you need to investigate why your application (or the dependent library) wants a shared file-backed mapping. Typically this is done for seamless and fast dumping of the file contents to the underlying storage, or for shared memory between processes. Both these approaches are insecure, and thus Gramine disallows such mappings. There are several ways to circumvent this:
Finally, you can modify your application's source code to not use |
Beta Was this translation helpful? Give feedback.
-
|
Thank you! |
Beta Was this translation helpful? Give feedback.
The warning says it all: Gramine currently does not allow writable pass-through mappings on allowed files.
First of all, you need to investigate why your application (or the dependent library) wants a shared file-backed mapping. Typically this is done for seamless and fast dumping of the file contents to the underlying storage, or for shared memory between processes. Both these approaches are insecure, and thus Gramine disallows such mappings.
There are several ways to circumvent this:
fs.mounts = { type="tmpfs", path="/root/.ehtereum/.ethash", ... }