mirror of
https://github.com/torvalds/linux
synced 2024-10-19 17:58:44 +00:00
0eaa8d153a
Use a statically generated key for signing the enclave, because generating keys on the fly can eat the kernel entropy pool. Another good reason for doing this is predictable builds. The RSA has been arbitrarily selected. It's contents do not matter. This also makes the selftest execute a lot quicker instead of the delay that it had before (because of slow key generation). [ bp: Disambiguate "static key" which means something else in the kernel, fix typos. ] Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Borislav Petkov <bp@suse.de> Cc: linux-kselftest@vger.kernel.org Link: https://lkml.kernel.org/r/20201118170640.39629-1-jarkko@kernel.org
58 lines
1.3 KiB
Makefile
58 lines
1.3 KiB
Makefile
top_srcdir = ../../../..
|
|
|
|
include ../lib.mk
|
|
|
|
.PHONY: all clean
|
|
|
|
CAN_BUILD_X86_64 := $(shell ../x86/check_cc.sh $(CC) \
|
|
../x86/trivial_64bit_program.c)
|
|
|
|
ifndef OBJCOPY
|
|
OBJCOPY := $(CROSS_COMPILE)objcopy
|
|
endif
|
|
|
|
INCLUDES := -I$(top_srcdir)/tools/include
|
|
HOST_CFLAGS := -Wall -Werror -g $(INCLUDES) -fPIC -z noexecstack
|
|
ENCL_CFLAGS := -Wall -Werror -static -nostdlib -nostartfiles -fPIC \
|
|
-fno-stack-protector -mrdrnd $(INCLUDES)
|
|
|
|
TEST_CUSTOM_PROGS := $(OUTPUT)/test_sgx
|
|
|
|
ifeq ($(CAN_BUILD_X86_64), 1)
|
|
all: $(TEST_CUSTOM_PROGS) $(OUTPUT)/test_encl.elf
|
|
endif
|
|
|
|
$(OUTPUT)/test_sgx: $(OUTPUT)/main.o \
|
|
$(OUTPUT)/load.o \
|
|
$(OUTPUT)/sigstruct.o \
|
|
$(OUTPUT)/call.o \
|
|
$(OUTPUT)/sign_key.o
|
|
$(CC) $(HOST_CFLAGS) -o $@ $^ -lcrypto
|
|
|
|
$(OUTPUT)/main.o: main.c
|
|
$(CC) $(HOST_CFLAGS) -c $< -o $@
|
|
|
|
$(OUTPUT)/load.o: load.c
|
|
$(CC) $(HOST_CFLAGS) -c $< -o $@
|
|
|
|
$(OUTPUT)/sigstruct.o: sigstruct.c
|
|
$(CC) $(HOST_CFLAGS) -c $< -o $@
|
|
|
|
$(OUTPUT)/call.o: call.S
|
|
$(CC) $(HOST_CFLAGS) -c $< -o $@
|
|
|
|
$(OUTPUT)/sign_key.o: sign_key.S
|
|
$(CC) $(HOST_CFLAGS) -c $< -o $@
|
|
|
|
$(OUTPUT)/test_encl.elf: test_encl.lds test_encl.c test_encl_bootstrap.S
|
|
$(CC) $(ENCL_CFLAGS) -T $^ -o $@
|
|
|
|
EXTRA_CLEAN := \
|
|
$(OUTPUT)/test_encl.elf \
|
|
$(OUTPUT)/load.o \
|
|
$(OUTPUT)/call.o \
|
|
$(OUTPUT)/main.o \
|
|
$(OUTPUT)/sigstruct.o \
|
|
$(OUTPUT)/test_sgx \
|
|
$(OUTPUT)/test_sgx.o \
|