Error while running sgx-step/app/foreshadow attack. about sgx-step

[jovanbulck]

hm, this seems to be not an issue with SGX-Step, but with your SGX-SDK installation somehow. The 0x4004 error code indicates a problem with acquiring the launch token upon enclave creation:

SGX_ERROR_SERVICE_INVALID_PRIVILEGE = SGX_MK_ERROR(0x4004), /* Enclave has no privilege to get launch token */

https://github.com/intel/linux-sgx/blob/d10c025eb0bfe0c53e524a486f2d17307d0f1206/common/inc/sgx_error.h#L83

Not sure why you get that error exactly though. Especially since you say it works for sdk/intel-sdk/linux-sgx/SampleCode/. Some attention points:

• If you need LD_LIBRARY_PATH, you should also pass it to the invocation of ./app (nut just ldd above, it just prints stuff but does not set anything), so not sure which version of the SDK you're using exactly here.
• You'll also need to pass sudo before ./app, but that'll only be a problem after you created the enclave and you'll start the page-table manipulations normally.
• you should inspect the kernel output using dmesg to see if there's any errors printed in there.

Crucial for current SGX-Step to work is to use the SDK and SGX driver that are in the git submodules, so you should check you don't have another incompatible SGX driver by accident. Specifically, I think the /dev/sgx_enclave driver has recently been upstreamed to the Linux kernel, but I didn't update SGX-Step so you should make sure you don't have that driver and are using the dev/isgx one.

Sorry for the delayed answer, lost track, hope this still helps! Let me know any progress

[jovanbulck]

issue seems dead, so closing