Home
last modified time | relevance | path

Searched refs:enclave (Results 1 – 15 of 15) sorted by relevance

/linux-6.15/Documentation/translations/zh_CN/virt/
H A Dne_overview.rst28 enclave。
30 一个enclave与催生它的虚拟机一起运行。这种设置符合低延迟应用的需要。为enclave
37 提供的ioctl接口来生成一个enclave虚拟机（这就是下面的2）。
46 从主虚拟机中分割出来，专门用于enclave虚拟机。enclave没有连接持久性存储。
50 配[2][3]。一个enclave的内存大小需要至少64 MiB。enclave内存和CPU需要来自同
62 在enclave中运行的应用程序需要和将在enclave虚拟机中运行的操作系统（如内核、
63 ramdisk、init）一起被打包到enclave镜像中。enclave虚拟机有自己的内核并遵循标
70 查在enclave虚拟机中加载的enclave镜像是否是打算运行的那个。
75 enclave镜像（EIF）被加载到enclave内存中，偏移量为8 MiB。enclave中的初始进程
77 个机制用于在主虚拟机中检查enclave是否已经启动。主虚拟机的CID是3。
[all …]
/linux-6.15/Documentation/virt/
H A Dne_overview.rst16 application then runs in a separate VM than the primary VM, namely an enclave.
31 enclave VM (that's 2 below).
37 maps to an enclave start PCI command. The PCI device commands are then
44 for the enclave VM. An enclave does not have persistent storage attached.
49 user space [2][3][7]. The memory size for an enclave needs to be at least
50 64 MiB. The enclave memory and CPUs need to be from the same NUMA node.
64 The application that runs in the enclave needs to be packaged in an enclave
66 enclave VM. The enclave VM has its own kernel and follows the standard Linux
75 loaded in the enclave VM is the one that was intended to be run.
82 The enclave image (EIF) is loaded in the enclave memory at offset 8 MiB. The
[all …]
/linux-6.15/Documentation/arch/x86/
H A Dsgx.rst40 the enclave during enclave construction with special, limited SGX instructions.
42 Only a CPU executing inside an enclave can directly access enclave memory.
44 enclave.
95 pages and establish enclave page permissions.
108 adding and removing of enclave pages. When an enclave accesses an address
110 regular page will be dynamically added to the enclave. The enclave is
164 overcommitment of enclave memory. If the system runs out of enclave memory,
172 this the CPU can execute inside the enclave.
189 enclave memory.
216 the enclave through special SGX instructions. A run-time within the enclave is
[all …]
/linux-6.15/tools/testing/selftests/sgx/
H A Dtest_encl_bootstrap.S44 # inside the enclave for TCS #1 and one page into the enclave for
62 # NOTE: as the selftest enclave is *not* intended for production,
H A Dmain.c170 FIXTURE(enclave) { in FIXTURE() argument
253 FIXTURE_SETUP(enclave) in FIXTURE_SETUP() argument
257 FIXTURE_TEARDOWN(enclave) in FIXTURE_TEARDOWN() argument
282 TEST_F(enclave, unclobbered_vdso) in TEST_F() argument
504 TEST_F(enclave, clobbered_vdso) in TEST_F() argument
574 TEST_F(enclave, tcs_entry) in TEST_F() argument
616 TEST_F(enclave, pte_permissions) in TEST_F() argument
720 TEST_F(enclave, tcs_permissions) in TEST_F() argument
778 TEST_F(enclave, epcm_permissions) in TEST_F() argument
977 TEST_F(enclave, augment) in TEST_F() argument
[all …]
/linux-6.15/Documentation/admin-guide/hw-vuln/
H A Dspecial-register-buffer-data-sampling.rst92 enclaves (including execution of RDRAND or RDSEED inside an enclave, as well
104 enclave on that logical processor. Opting out of the mitigation for a
108 Note that inside of an Intel SGX enclave, the mitigation is applied regardless
H A Dgather_data_sampling.rst32 Non-enclaves can infer SGX enclave data
/linux-6.15/drivers/virt/nitro_enclaves/
H A DKconfig12 This driver consists of support for enclave lifetime management
/linux-6.15/Documentation/firmware-guide/acpi/apei/
H A Deinj.rst224 address. But the h/w prevents any software outside of an SGX enclave
225 from accessing enclave pages (even BIOS SMM mode).
228 1) Determine physical address of enclave page
231 3) Enter the enclave
/linux-6.15/Documentation/ABI/testing/
H A Dsecurityfs-secrets-coco11 by the Guest Owner and decrypted inside the trusted enclave,
/linux-6.15/arch/x86/include/asm/
H A Dptrace.h86 enclave : 1,
/linux-6.15/tools/arch/x86/kcpuid/
H A Dcpuid.csv414 … miscselect_exinfo , SSA.MISC frame: reporting #PF and #GP exceptions inside enclave supported
415 … 1, miscselect_cpinfo , SSA.MISC frame: reporting #CP exceptions inside enclave supported
416 …0x12, 0, edx, 7:0, max_enclave_sz_not64 , Maximum enclave size in non-64-bit mod…
417 …0x12, 0, edx, 15:8, max_enclave_sz_64 , Maximum enclave size in 64-bit mode (l…
418 …1, eax, 0, secs_attr_init , ATTRIBUTES.INIT supported (enclave initialized by EI…
419 …, eax, 1, secs_attr_debug , ATTRIBUTES.DEBUG supported (enclave permits debugger …
420 …ax, 2, secs_attr_mode64bit , ATTRIBUTES.MODE64BIT supported (enclave runs in 64-bit mo…
425 …ax, 10, secs_attr_aexnotify , ATTRIBUTES.AEXNOTIFY supported (enclave threads may get A…
/linux-6.15/arch/x86/kvm/
H A DKconfig127 This includes support to expose "raw" unreclaimable enclave memory to
/linux-6.15/arch/x86/
H A DKconfig1892 and data, referred to as enclaves. An enclave's private memory can
1893 only be accessed by code running within the enclave. Accesses from
1894 outside the enclave, including other enclaves, are disallowed by
/linux-6.15/Documentation/virt/kvm/
H A Dapi.rst8022 more privileged enclave attributes. args[0] must hold a file handle to a valid
8026 The SGX subsystem restricts access to a subset of enclave attributes to provide
8030 by running an enclave in a VM, KVM prevents access to privileged attributes by