Open Enclave
0.18.0
|
◆ OE_ENCLAVE_FLAG_DEBUG
NOTE: When introducing new OE_ENCAVE_FLAG_*, make sure to update tools/oesign.c:_map_attributes(), if relevant. Flag passed into oe_create_enclave to run the enclave in debug mode. The flag allows the enclave to be created without the enclave binary being signed. It also gives a developer permission to debug the process and get access to enclave memory. What this means is ** DO NOT SHIP CODE WITH THE OE_ENCLAVE_FLAG_DEBUG ** because it is unsecure. What it does give is the ability to develop your enclave more easily. Before you ship the code you need to have a proper code signing story for the enclave shared library. |