lkml.org 
[lkml]   [2020]   [Aug]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH v6 10/18] nitro_enclaves: Add logic for getting the enclave image load info
    Date
    Before setting the memory regions for the enclave, the enclave image
    needs to be placed in memory. After the memory regions are set, this
    memory cannot be used anymore by the VM, being carved out.

    Add ioctl command logic to get the offset in enclave memory where to
    place the enclave image. Then the user space tooling copies the enclave
    image in the memory using the given memory offset.

    Signed-off-by: Andra Paraschiv <andraprs@amazon.com>
    ---
    Changelog

    v5 -> v6

    * Check for invalid enclave image load flags.

    v4 -> v5

    * Check for the enclave not being started when invoking this ioctl call.
    * Remove log on copy_from_user() / copy_to_user() failure.

    v3 -> v4

    * Use dev_err instead of custom NE log pattern.
    * Set enclave image load offset based on flags.
    * Update the naming for the ioctl command from metadata to info.

    v2 -> v3

    * No changes.

    v1 -> v2

    * New in v2.
    ---
    drivers/virt/nitro_enclaves/ne_misc_dev.c | 30 +++++++++++++++++++++++
    1 file changed, 30 insertions(+)

    diff --git a/drivers/virt/nitro_enclaves/ne_misc_dev.c b/drivers/virt/nitro_enclaves/ne_misc_dev.c
    index 4787bc59d39d..850e5e0ce0e9 100644
    --- a/drivers/virt/nitro_enclaves/ne_misc_dev.c
    +++ b/drivers/virt/nitro_enclaves/ne_misc_dev.c
    @@ -652,6 +652,36 @@ static long ne_enclave_ioctl(struct file *file, unsigned int cmd, unsigned long
    return 0;
    }

    + case NE_GET_IMAGE_LOAD_INFO: {
    + struct ne_image_load_info image_load_info = {};
    +
    + if (copy_from_user(&image_load_info, (void __user *)arg, sizeof(image_load_info)))
    + return -EFAULT;
    +
    + mutex_lock(&ne_enclave->enclave_info_mutex);
    +
    + if (ne_enclave->state != NE_STATE_INIT) {
    + dev_err_ratelimited(ne_misc_dev.this_device,
    + "Enclave is not in init state\n");
    +
    + mutex_unlock(&ne_enclave->enclave_info_mutex);
    +
    + return -NE_ERR_NOT_IN_INIT_STATE;
    + }
    +
    + mutex_unlock(&ne_enclave->enclave_info_mutex);
    +
    + if (image_load_info.flags == NE_EIF_IMAGE)
    + image_load_info.memory_offset = NE_EIF_LOAD_OFFSET;
    + else
    + return -EINVAL;
    +
    + if (copy_to_user((void __user *)arg, &image_load_info, sizeof(image_load_info)))
    + return -EFAULT;
    +
    + return 0;
    + }
    +
    default:
    return -ENOTTY;
    }
    --
    2.20.1 (Apple Git-117)



    Amazon Development Center (Romania) S.R.L. registered office: 27A Sf. Lazar Street, UBC5, floor 2, Iasi, Iasi County, 700045, Romania. Registered in Romania. Registration number J22/2621/2005.

    \
     
     \ /
      Last update: 2020-08-05 11:14    [W:7.643 / U:0.024 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site