Michael Steiner

SGX attestation verification

6

We are not verifying - in pservice during secret provisioning and in eservice during enclave registration - all report fields for attestations, in particular we are not looking at the...

Better handling of IAS v3 extensions

2

IAS v3 handled new return status CONFIGURATION_NEEDED and additional headers "Advisory-URL" and "Advisory-IDs". The advisory-* headers should give pointers on how to address these errors (e.g., CONFIGURATION_NEEDED might appear now...

Xserver unresponsive after external monitor disconnect until hibernate/resume cycle with wsl 2.1.1

1

### Windows build number: 10.0.22631.0 ### Your Distribution version: 23.10 ### Your WSL versions: WSL version: 2.1.1.0 Kernel version: 5.15.146.1-2 WSLg version: 1.0.60 MSRDC version: 1.2.5105 Direct3D version: 1.611.1-81528511 DXCore...

## Description of the changes This is a WIP PR addresses issue #1835, i.e., rollback protection of protected files beyond a single open-to-close window but across the whole runtime of...

During `rename`, the `dentry` of the corresponding handle is not updated, which e.g., makes `fchown` not work properly. I did discover that during work on issue #1835 in Draft PR...

### Description of the problem Currently, `g_process.cwd`is of type `dentry`, meaning that it always refer to a fixed path until `fchdir` changes that, even in presence of `rename` or `unlink`...

[Pal-SGX/LibOS] Move (expensive) creation of (shallow) merkle tree of trusted files out of critical path

3

### Description of the feature For trusted files, replace the full-file hash in the manifest with a hash over a new meta-data file, produced as a preprocessing step and containing...

GDB works only with hbreak, not break for libos

4

### Description of the problem While standard software breakpoints (`break`) work for PAL and application, it seems currently for libos one needs hardware breakpoints (`hbreak`) to interrupt the program (setting...

## Description of the changes During `rename`, the `dentry` of the corresponding handle is not updated. Keeping that consistent is necessary to resolve issue #1835 in Draft PR #1856. This...

[tests] Fix tampering tests for protected files

1

## Description of the changes Test `test_500_invalid` always failed as test files to decrypt _always_ had an illegal filename masking the actual intended tampering. Fixing this in `libos/test/fs/test_enc.py` showed that...