feat(sgx): put all python packages into trusted_files

bytedance · Apr 8, 2024 · 3e5f422 · 3e5f422
1 parent 1839c29
commit 3e5f422
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/sgx/gramine/CI-Examples/generate-token/python.manifest.template b/sgx/gramine/CI-Examples/generate-token/python.manifest.template
@@ -67,6 +67,9 @@ sgx.trusted_files = [
   "file:/usr/{{ arch_libdir }}/",
   "file:/etc/ssl/certs/ca-certificates.crt",
   "file:/etc/default/apport",
+  "file:/usr/local/lib/",
+  "file:{{ python.stdlib }}/",
+  "file:{{ python.distlib }}/", 
   "file:/etc/mime.types",
   "file:/gramine/leader/",
   "file:/gramine/follower/"
@@ -76,8 +79,6 @@ sgx.allowed_files = [
   "file:tensorflow_io.py",
   "file:/opt/tiger/",
   "file:/opt/meituan/",
-  "file:{{ python.stdlib }}/",
-  "file:{{ python.distlib }}/",
   "file:/usr/lib/ssl/openssl.cnf",
   "file:/usr/lib/gcc",
   "file:/etc/ethers",
@@ -99,7 +100,6 @@ sgx.allowed_files = [
   "file:/root/.keras/keras.json",
   "file:dynamic_config.json",
   "file:/usr/bin/",
-  "file:/usr/local/lib",
   "file:/lib/",
   "file:/bin/",
   "file:/data/",