@@ -295,6 +295,30 @@ static long ne_enclave_ioctl(struct file *file, unsigned int cmd,
return rc;
}
+ case NE_GET_IMAGE_LOAD_METADATA: {
+ struct image_load_metadata image_load_metadata = {};
+
+ if (copy_from_user(&image_load_metadata, (void *)arg,
+ sizeof(image_load_metadata))) {
+ pr_err_ratelimited(NE "Error in copy from user\n");
+
+ return -EFAULT;
+ }
+
+ /* TODO: Check flags before setting the memory offset. */
+
+ image_load_metadata.memory_offset = NE_IMAGE_LOAD_OFFSET;
+
+ if (copy_to_user((void *)arg, &image_load_metadata,
+ sizeof(image_load_metadata))) {
+ pr_err_ratelimited(NE "Error in copy to user\n");
+
+ return -EFAULT;
+ }
+
+ return 0;
+ }
+
default:
return -ENOTTY;
}
Before setting the memory regions for the enclave, the enclave image needs to be placed in memory. After the memory regions are set, this memory cannot be used anymore by the VM, being carved out. Add ioctl command logic to get the offset in enclave memory where to place the enclave image. Then the user space tooling copies the enclave image in the memory using the giveni memory offset. Signed-off-by: Andra Paraschiv <andraprs@amazon.com> --- drivers/virt/nitro_enclaves/ne_misc_dev.c | 24 +++++++++++++++++++++++ 1 file changed, 24 insertions(+)