CPC G06F 21/53 (2013.01) [G06F 21/12 (2013.01); G06F 21/57 (2013.01); G06F 21/6245 (2013.01); G06F 21/74 (2013.01)] | 18 Claims |
1. A method for handling file operations for files of an enclave stored in memory of a host computing device, the method comprising:
receiving, by one or more processors of the host computing device, a request from a function in an enclave to perform a file operation at a file path, wherein the file path indicates that the file is in a host access domain that handles non-sensitive data available and modifiable by other untrusted software running on the host computing device;
delegating, by the one or more processors, the file operation to the host computing device;
translating, by the one or more processors, a value of a flag of the file path into a native value of the host computing device for the flag; and
forwarding, by the one or more processors, the file path to an enclave manager outside the enclave for further forwarding to host software of the host computing device.
|