76f91a1aa3
1. Add Occlum.json as Occlum's config file 2. Add tools/bin/build_enclave 3. Add tools/bin/protect_integrity 4. Validate Occlum.json.protected on LibOS startup 5. Parse Occlum.json.protected on LibOS startup 6. Config enclave size using Occlum.json 7. Config process memory sizes using Occlum.json
28 lines
937 B
Plaintext
28 lines
937 B
Plaintext
enclave {
|
|
include "sys/types.h"
|
|
include "sgx_key.h"
|
|
|
|
from "sgx_tstdc.edl" import *;
|
|
from "sgx_tprotected_fs.edl" import *;
|
|
|
|
trusted {
|
|
public int ecall_protect([in, string] const char* input_path,
|
|
[in, string] const char* ouput_path);
|
|
public int ecall_show([in, string] const char* input_path);
|
|
public int ecall_show_mac([in, string] const char* input_path);
|
|
};
|
|
|
|
untrusted {
|
|
// File operations
|
|
int ocall_open([in, string] const char* path);
|
|
ssize_t ocall_read(int fd, [out, size=size] void* buf, size_t size);
|
|
ssize_t ocall_write(int fd, [in, size=size] const void* buf, size_t size);
|
|
int ocall_close(int fd);
|
|
|
|
// Print to the standard output
|
|
void ocall_print([in, string] const char* msg);
|
|
// Print to the standard error
|
|
void ocall_eprint([in, string] const char* msg);
|
|
};
|
|
};
|