topic Syscalls are generally not in Intel® Software Guard Extensions (Intel® SGX)

System calls inside enclave

sharma__ramya — Mon, 06 May 2019 19:55:44 GMT

Hi,

I have observed that majority of the system calls, like fork() and rand() are prohibited inside the enclave. But, some of the memory based system calls, like mmap() are allowed.

Can anyone please explain why and how mmap() is allowed inside the enclaves?

Thanks!

Syscalls are generally not

Michalevsky__Yan — Mon, 06 May 2019 22:08:14 GMT

Syscalls are generally not allowed inside enclaves. If you're able to call one of them, it means that the SDK replaces this libc function with it's own implementation. In the SDK it's under tlibc.