CODEWITHSUNDEEP
intel
cout_display_name
cout_display_name

Reputation: 313

Can Intel SGX enclaves run at ring 0?

I gather that SGX enclaves run at ring 3. I want to run a program inside SGX enclave which will want to access kernel data structures and files. Is there any way I could achieve this?

In other words, can we run SGX enclaves using sudo with root privileges?

Upvotes: 1

Views: 414

Answers (2)

Richard Li
Richard Li

Reputation: 416

The way to want to access kernel data structure maybe through OCALL. You can call an OCALL inside of the enclave and let the untrusted code/host application call some system call functions to fetch the data you want.

Upvotes: 0

Surenthar
Surenthar

Reputation: 361

SGX Enclaves currently only allow for Ring 3 code execution. Intel SGX enclave runs in ring 3 only, no kernel mode. Intel SGX objective is secure the application in ring 3 itself.

Upvotes: 1

Related Questions