fixup! [Pal/Linux-SGX] Add sgx.protected_mr{enclave,signer}_files m…

…anifest options

Signed-off-by: Dmitrii Kuvaiskii <[email protected]>

Documentation/manifest-syntax.rst

@@ -518,7 +518,7 @@ using the SGX sealing key based on the MRENCLAVE identity of the enclave; they
 are useful to allow only the same enclave (on the same platform) to unseal
 files. ``sgx.protected_mrsigner_files`` are encrypted using the SGX sealing key
 based on the MRSIGNER identity of the enclave; they are useful to allow all
-enclaves from the same signer (but on the same platform) to unseal files.
+enclaves signed with the same key (and on the same platform) to unseal files.
 
 File check policy
 ^^^^^^^^^^^^^^^^^

LibOS/shim/test/regression/.gitignore

@@ -1,7 +1,7 @@
 /*.manifest
 /*.xml
 
-/protected_file.dat
+/sealed_file.dat
 /testfile
 
 /.cache

LibOS/shim/test/regression/manifest.template

@@ -37,8 +37,8 @@ sgx.allowed_files.tmp_dir = "file:tmp/"
 sgx.allowed_files.root = "file:root" # for getdents test
 sgx.allowed_files.testfile = "file:testfile" # for mmap_file test
 
-# for protected_file test
-sgx.protected_mrenclave_files.pffile = "file:protected_file.dat"
+# for sealed_file test
+sgx.protected_mrenclave_files.pffile = "file:sealed_file.dat"
 
 sgx.thread_num = 16
 

LibOS/shim/test/regression/test_libos.py

@@ -725,8 +725,8 @@ def test_040_sysfs(self):
             self.assertIn(f'{node}/hugepages/hugepages-2048kB/nr_hugepages: file', lines)
             self.assertIn(f'{node}/hugepages/hugepages-1048576kB/nr_hugepages: file', lines)
 
-    def test_060_protected_file(self):
-        pf_path = 'protected_file.dat'
+    def test_060_sealed_file(self):
+        pf_path = 'sealed_file.dat'
         if os.path.exists(pf_path):
             os.remove(pf_path)