dburihabwa / sgx-fs

Experimental encrypted file system using SGX and FUSE

fusesgx

fusegx is a user-space in-enclave file system.

Dependencies

Most of the dependencies can be installed by running the install.sh script on Ubuntu 16.04:

sudo ./install.sh

On other systems make sure that the following tools and libraries are installed.

• Intel SGX Driver
• Intel SGX SDK
• Intel SGX PSW
• libfuse 2.9
• g++

Build

make SGX_MODE=HW SGX_PRERELEASE=1

Run

To run the file system as daemon, run:

./app path/to/mountpoint

To run it in foreground mode, try:

./app -f path/to/mountpoint

To run it in foreground mode with the fuse debug mode, run:

./app -d path/to/mountpoint

sgx-fs's Issues

Question About sgx-fs Implementation

Hello,
I am trying to understand how do you store the superblock of the file system (or part of it) inside the enclave and preserving it between ECALLs. I see that you have a global file_system pointer and then you initialise it in the function init. Does the new file system object, referenced by the global pointer, exist after the init returns and some other operation is performed via another ECALL? I know that dynamically allocated object inside a function are destroyed after the function returns even if they are referenced by a global pointer. What am i missing? Thank you!

Data races

Data races among the following shared variables and functions.

shared variable	function1	function2
_ZL11FILE_SYSTEM	enclave_is_file	init_filesystem
_ZL11FILE_SYSTEM	enclave_mkdir	init_filesystem
_ZL11FILE_SYSTEM	init_filesystem	destroy_filesystem
_ZL11FILE_SYSTEM	init_filesystem	enclave_readdir
_ZL11FILE_SYSTEM	init_filesystem	init_filesystem
_ZL11FILE_SYSTEM	ramfs_create_file	init_filesystem
_ZL11FILE_SYSTEM	ramfs_delete_file	init_filesystem
_ZL11FILE_SYSTEM	ramfs_get	init_filesystem
_ZL11FILE_SYSTEM	ramfs_get_number_of_entries	init_filesystem
_ZL11FILE_SYSTEM	ramfs_get_size	init_filesystem
_ZL11FILE_SYSTEM	ramfs_put	init_filesystem
_ZL11FILE_SYSTEM	ramfs_trunkate	init_filesystem
_ZL11FILE_SYSTEM	sgxfs_dump	init_filesystem
_ZL11FILE_SYSTEM	sgxfs_restore	init_filesystem