Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Mazhar_N_
Beginner
208 Views

Can SGX enclaves run at ring 0?

Jump to solution

Is it possible to run SGX enclaves at ring 0?

OR

Can we run SGX enclaves using sudo with root privileges?

I gather that SGX enclaves run at ring 3. Suppose I want to run a program inside SGX enclave which will want to access kernel data structures. Is there any way I could achieve this?

0 Kudos
1 Solution
208 Views

Hi Mazhar,

SGX Enclaves currently only allow for Ring 3 code execution. Intel SGX enclave runs in ring 3 only, no kernel mode. 
Intel SGX objective is secure the application in ring 3 itself. Applications are not protected from privileged code attacks. Intel® SGX provides a safe place for code and data in the application.

Thanks and Regards,
Surenthar Selvaraj

View solution in original post

3 Replies
209 Views

Hi Mazhar,

SGX Enclaves currently only allow for Ring 3 code execution. Intel SGX enclave runs in ring 3 only, no kernel mode. 
Intel SGX objective is secure the application in ring 3 itself. Applications are not protected from privileged code attacks. Intel® SGX provides a safe place for code and data in the application.

Thanks and Regards,
Surenthar Selvaraj

View solution in original post

Mazhar_N_
Beginner
208 Views

Surenthar Selvaraj. (Intel) wrote:

Hi Mazhar,

SGX Enclaves currently only allow for Ring 3 code execution. Intel SGX enclave runs in ring 3 only, no kernel mode. 
Intel SGX objective is secure the application in ring 3 itself. Applications are not protected from privileged code attacks. Intel® SGX provides a safe place for code and data in the application.

Thanks and Regards,
Surenthar Selvaraj

So that means we cannot run a kernel module inside SGX enclaves, right?

208 Views

Hi Mazhar,

Yes, We cannot run a kernel module inside SGX enclaves.

-Surenthar.

Reply