httpd.manifest.template 3.8 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192
  1. #!$(PAL)
  2. loader.preload = file:$(SHIMPATH)
  3. loader.exec = file:obj/bin/httpd
  4. loader.execname = httpd
  5. loader.env.LD_LIBRARY_PATH = /lib:/lib/x86_64-linux-gnu:/usr/lib:/usr/lib/x86_64-linux-gnu
  6. loader.debug_type = none
  7. fs.mount.lib1.type = chroot
  8. fs.mount.lib1.path = /lib
  9. fs.mount.lib1.uri = file:$(LIBCDIR)
  10. fs.mount.lib2.type = chroot
  11. fs.mount.lib2.path = /lib/x86_64-linux-gnu
  12. fs.mount.lib2.uri = file:/lib/x86_64-linux-gnu
  13. fs.mount.usr.type = chroot
  14. fs.mount.usr.path = /usr
  15. fs.mount.usr.uri = file:/usr
  16. fs.mount.cwd.type = chroot
  17. fs.mount.cwd.path = $(PWD)
  18. fs.mount.cwd.uri = file:
  19. sgx.enclave_size=4G
  20. sgx.allow_file_creation = 1
  21. net.allow_peer.1=:
  22. # allow to bind on port for listening
  23. net.allow_bind.1 =:
  24. sgx.trusted_files.ld = file:$(LIBCDIR)/ld-linux-x86-64.so.2
  25. sgx.trusted_files.libc = file:$(LIBCDIR)/libc.so.6
  26. sgx.trusted_files.libdl = file:$(LIBCDIR)/libdl.so.2
  27. sgx.trusted_files.libm = file:$(LIBCDIR)/libm.so.6
  28. sgx.trusted_files.libpthread = file:$(LIBCDIR)/libpthread.so.0
  29. sgx.trusted_files.libresolv = file:$(LIBCDIR)/libresolv.so.2
  30. sgx.trusted_files.libnssdns = file:/lib/x86_64-linux-gnu/libnss_dns.so.2
  31. sgx.trusted_files.libnssfiles = file:/lib/x86_64-linux-gnu/libnss_files.so.2
  32. sgx.trusted_files.libnsscompact = file:/lib/x86_64-linux-gnu/libnss_compat.so.2
  33. sgx.trusted_files.libnssnis = file:/lib/x86_64-linux-gnu/libnss_nis.so.2
  34. sgx.trusted_files.libpcre = file:/lib/x86_64-linux-gnu/libpcre.so.3
  35. sgx.trusted_files.libapr = file:obj/lib/libapr-1.so.0
  36. sgx.trusted_files.libaprutil = file:obj/lib/libaprutil-1.so.0
  37. sgx.trusted_files.libexpat = file:/lib/x86_64-linux-gnu/libexpat.so.1
  38. sgx.trusted_files.libcrypt = file:/lib/x86_64-linux-gnu/libcrypt.so.1
  39. sgx.trusted_files.libxml2 = file:/usr/lib/x86_64-linux-gnu/libxml2.so.2
  40. sgx.trusted_files.libz = file:/lib/x86_64-linux-gnu/libz.so.1
  41. sgx.trusted_files.liblzma = file:/lib/x86_64-linux-gnu/liblzma.so.5
  42. sgx.trusted_files.libnsl = file:/lib/x86_64-linux-gnu/libnsl.so.1
  43. sgx.trusted_files.libicuuc = file:/usr/lib/x86_64-linux-gnu/libicuuc.so.55
  44. sgx.trusted_files.libicudata = file:/usr/lib/x86_64-linux-gnu/libicudata.so.55
  45. sgx.trusted_files.libstdcpp = file:/usr/lib/x86_64-linux-gnu/libstdc++.so.6
  46. sgx.trusted_files.libgcc_c = file:/lib/x86_64-linux-gnu/libgcc_s.so.1
  47. sgx.allowed_files.modules = file:obj/modules
  48. sgx.allowed_files.conf = file:obj/conf
  49. sgx.allowed_files.htdocs = file:obj/htdocs
  50. sgx.allowed_files.logs = file:obj/logs
  51. sgx.trusted_files.conf = file:obj/conf/httpd.conf
  52. sgx.trusted_files.confmime = file:obj/conf/mime.types
  53. #Source code files
  54. sgx.trusted_files.indexphp = file:obj/htdocs/index.php
  55. sgx.trusted_files.actionphp = file:obj/htdocs/action.php
  56. sgx.allowed_files.timeop=file:target_time.txt
  57. sgx.allowed_files.phptimeop=file:obj/htdocs/mitigator_phptime.txt
  58. #Extension and its dependencies (that are not already included above)
  59. sgx.trusted_files.phpini=file:obj/lib/php.ini
  60. sgx.trusted_files.mainextension=file:obj/modules/localattestation_decryption.so
  61. sgx.trusted_files.libphpcpp=file:/usr/lib/libphpcpp.so.2.0
  62. sgx.trusted_files.libprotobuf=file:/usr/lib/x86_64-linux-gnu/libprotobuf.so.9
  63. sgx.trusted_files.libuuid=file:/lib/x86_64-linux-gnu/libuuid.so.1
  64. sgx.trusted_files.libcrypto = file:/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
  65. ## Apache PHP modules (LoadModule command in httpd.conf)
  66. sgx.trusted_files.mod_authz_core=file:obj/modules/mod_authz_core.so
  67. sgx.trusted_files.mod_access_compat=file:obj/modules/mod_access_compat.so
  68. sgx.trusted_files.mod_filter=file:obj/modules/mod_filter.so
  69. sgx.trusted_files.mod_mime=file:obj/modules/mod_mime.so
  70. sgx.trusted_files.mod_log_config=file:obj/modules/mod_log_config.so
  71. sgx.trusted_files.mod_log_debug=file:obj/modules/mod_log_debug.so
  72. sgx.trusted_files.mod_unixd=file:obj/modules/mod_unixd.so
  73. sgx.trusted_files.mod_status=file:obj/modules/mod_status.so
  74. sgx.trusted_files.mod_dir=file:obj/modules/mod_dir.so
  75. sgx.trusted_files.libphp7=file:obj/modules/libphp7.so