graphene/Pal/src/host/Linux-SGX/pal_security.h

/* -*- mode:c; c-file-style:"k&r"; c-basic-offset: 4; tab-width:4; indent-tabs-mode:nil; mode:auto-fill; fill-column:78; -*- */
/* vim: set ts=4 sw=4 et tw=78 fo=cqt wm=0: */

/* Copyright (C) 2014 Stony Brook University
   This file is part of Graphene Library OS.

   Graphene Library OS is free software: you can redistribute it and/or
   modify it under the terms of the GNU Lesser General Public License
   as published by the Free Software Foundation, either version 3 of the
   License, or (at your option) any later version.

   Graphene Library OS is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU Lesser General Public License for more details.

   You should have received a copy of the GNU Lesser General Public License
   along with this program.  If not, see <http://www.gnu.org/licenses/>.  */

#ifndef PAL_SECURITY_H
#define PAL_SECURITY_H

#include "pal.h"
#include "sgx_arch.h"

typedef char PAL_SEC_STR[255];

struct pal_sec {
    /* host credentials */
    PAL_NUM         instance_id;
    PAL_IDX         ppid, pid, uid, gid;

    /* enclave information */
    sgx_arch_hash_t         mrenclave;
    sgx_arch_hash_t         mrsigner;
    sgx_arch_attributes_t   enclave_attributes;

    /* remaining heap usable by application */
    PAL_PTR         heap_min, heap_max;

    /* executable name, addr and size */
    PAL_SEC_STR     exec_name;
    PAL_PTR         exec_addr;
    PAL_NUM         exec_size;

    PAL_SEC_STR     manifest_name;

    /* need three proc fds if it has a parent */
    PAL_IDX         proc_fds[3];

    /* additional information */
    PAL_SEC_STR     pipe_prefix;
    PAL_IDX         mcast_port, mcast_srv, mcast_cli;

#ifdef DEBUG
    PAL_BOL         in_gdb;
#endif

#if PRINT_ENCLAVE_STAT == 1
    PAL_NUM         start_time;
#endif
};

#ifdef IN_ENCLAVE
extern struct pal_sec pal_sec;
#endif

#define GRAPHENE_TEMPDIR        "/tmp/graphene"
#define GRAPHENE_PIPEDIR        (GRAPHENE_TEMPDIR "/pipes")

#define PROC_INIT_FD    255

#define MCAST_GROUP "239.0.0.1"

#endif /* PAL_SECURITY_H */