Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CPUID should return only information provided as part of the attestation #538

Open
davidchisnall opened this issue Jun 25, 2020 · 0 comments
Labels
area: attestation Attestation enhancement p3 Non-blocking priority
Milestone

Comments

@davidchisnall
Copy link
Contributor

Currently, CPUID is emulated using an ocall, which allows an attacker to provide any information that they want. We should provide a set of CPU features in the initial configuration (subject to attestation) and whitelist a set of leaf nodes that we'll emulate. In particular, it's important that we don't return the wrong values for current core ID and instead map this to ethread ID.

The same information should be used to populate /proc/cpuinfo (#529)

@prp prp added area: attestation Attestation enhancement p3 Non-blocking priority labels Jun 25, 2020
@prp prp added this to the Milestone 2 milestone Jun 25, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area: attestation Attestation enhancement p3 Non-blocking priority
Projects
None yet
Development

No branches or pull requests

2 participants