8 April 2025

[donporter]

Meeting agenda:
*

[monavij]

1. Discuss RFC: Support for filesystem migration after SGX SVN update #855
2. Discuss [WIP] [LibOS,PAL] Introduce Netlink socket support #1016

[donporter]

Minutes:

1. We need better error messages to the user when the svn has changed. This requires putting the svn id on disk so that we can tell what the data was encoded with. A related concern is rollback attacks; does this change make rollback attacks easier to mount? The key decision is whether to go down the per-file or per-app metadata route.

We request the maintainers to think about this PR and discuss next week.

Also NB: There is a new kernel patch in the pipeline that can update SVN without a reboot. https://lore.kernel.org/lkml/Z98wDd_eMCFE40Z7@kernel.org/T/

2. There was consensus among those in attendance that these use cases for netlink support make sense. 1016 is a host pass-through, which we could merge first with warnings, but it is insecure and non-portable; we probably will not merge this as-is. We will probably need to work with potential users to limit functionality to their subset of the functionality (vs all netlink options). We should implement this inside Gramine, instead of a passthrough. For users that want this, it would help to have a test case --- either commands to run your open-source program and repro the issue, or, for a closed application, collect an strace and write a hello-world-level C program with similar netlink behavior.