Bug 8033 - launch secret注入的数据所在的内存区域,概率性被OS数据覆盖,导致读取时数据异常
Summary: launch secret注入的数据所在的内存区域,概率性被OS数据覆盖,导致读取时数据异常
Status: NEW
Alias: None
Product: Anolis OS 8
Classification: Anolis OS
Component: BaseOS Packages (show other bugs) BaseOS Packages
Version: ---
Hardware: All Linux
: P3-Medium S3-normal
Target Milestone: ---
Assignee: Jacob
QA Contact: shuming
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-01-24 12:00 UTC by fangbaoshun
Modified: 2024-01-24 12:00 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description fangbaoshun hygon_group 2024-01-24 12:00:13 UTC
Description of problem:
Launch Secret注入的数据,在虚拟机生命周期内都有可能被使用,但是存放的区域被生命为STATIC,无法确保不会被OS的数据重写。

Version-Release number of selected component (if applicable):


How reproducible:
打开pre-attestation功能,启动CSV机密容器;
概率性出现efi-secret模块报错。

Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info: