fixup! [LibOS] Support special keys (MRENCLAVE, MRSIGNER) in `encrypt…

…ed` fs Signed-off-by: Paweł Marczewski <[email protected]>
gramineproject · Apr 21, 2022 · b356abf · b356abf
1 parent d574e3b
commit b356abf
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/LibOS/shim/src/fs/shim_fs_encrypted.c b/LibOS/shim/src/fs/shim_fs_encrypted.c
@@ -386,8 +386,8 @@ int get_or_create_encrypted_files_key(const char* name, struct shim_encrypted_fi
             memcpy(&key->pf_key, &pf_key, sizeof(pf_key));
             key->is_set = true;
         } else if (ret == -PAL_ERROR_NOTIMPLEMENTED) {
-            log_warning("Special key \"%s\" is not supported by current PAL. Mounts using this key "
-                        "will not work.", name);
+            log_debug("Special key \"%s\" is not supported by current PAL. Mounts using this key "
+                      "will not work.", name);
             /* proceed without setting value */
         } else {
             log_debug("DkGetSpecialKey(\"%s\") failed: %d", name, ret);

diff --git a/Pal/src/host/Linux-SGX/db_misc.c b/Pal/src/host/Linux-SGX/db_misc.c
@@ -629,7 +629,7 @@ int _DkSetProtectedFilesKey(const char* pf_key_hex) {
 int _DkGetSpecialKey(const char* name, void* key, size_t* key_size) {
     sgx_key_128bit_t sgx_key;
 
-    if (*key_size < sizeof(key))
+    if (*key_size < sizeof(sgx_key))
         return -PAL_ERROR_INVAL;
 
     int ret;