topic Re:SGX driver works only with sudo in Intel® Software Guard Extensions (Intel® SGX)

SGX driver works only with sudo

kai__chi — Tue, 07 Nov 2023 14:22:27 GMT

Hi,

My problem is that SGX applications run only when ran with sudo access. Without it seems that it doesn't detect the driver. I am running the SampleEnclave application on a machine with Xeon Gold 6330 CPU, Ubuntu 22.04, kernel 5.15.0-87-generic, SGX SDK 2.22.

When I run sudo ./app I get a typical output:

Checksum(0x0x7ffe61adc650, 100) = 0xfffd4143 Info: executing thread synchronization, please wait... Info: SampleEnclave successfully returned. Enter a character before exit ...

When I run just ./app:

[get_driver_type edmm_utility.cpp:116] Failed to open Intel SGX device. [open_se_device edmm_utility.cpp:178] Failed to open Intel SGX device. [get_driver_type /home/sgx/jenkins/ubuntuServer2204-release-build-trunk-222/build_target/PROD/label/Builder-UbuntuSrv2204/label_exp/ubuntu64/linux-trunk-opensource/psw/urts/linux/edmm_utility.cpp:116] Failed to open Intel SGX device. Info: Please make sure SGX module is enabled in the BIOS, and install SGX driver afterwards. Error: Invalid SGX device. Enter a character before exit ...

Any idea what is going on?

Re: SGX driver works only with sudo

Scott_R_Intel — Tue, 07 Nov 2023 14:27:00 GMT

On Ubuntu 22.04, you need to add your user to the "sgx" user group to be able to use the SGX device:

sudo usermod -aG sgx $USER

Make sure you log out and back in for the group add to take effect.

Re:SGX driver works only with sudo

Wan_Intel — Wed, 08 Nov 2023 02:09:15 GMT

Hi Kai Chi,

Thanks for reaching out to us.

Did you build the project with sudo command?

Could you please run make clean command in the terminal and build the application again without sudo?

Regards,

Wan

Re: SGX driver works only with sudo

kai__chi — Sun, 12 Nov 2023 18:36:17 GMT

Thanks! Adding user to group sgx solved the problem. I overlooked it in the new installation guide.

Re:SGX driver works only with sudo

Wan_Intel — Mon, 13 Nov 2023 02:05:29 GMT

Hi Scott_R_Intel,

Thanks for sharing the solution in the Intel® SGX community.

Hi Kai__chi,

Glad to know that your issue has been resolved. We'll close this case now. Please open a new question if additional information is needed and we'll be happy to help.

Regards,

Wan