From cf4b5f72e693a5b176b8a30cc4985d4100cf08fa Mon Sep 17 00:00:00 2001 From: Volod <141863857+volod-vana@users.noreply.github.com> Date: Tue, 10 Sep 2024 11:47:20 -0400 Subject: [PATCH] Whitelist ENV variables that get passed to the enclave (#5) --- my-proof.manifest.template | 3 +++ 1 file changed, 3 insertions(+) diff --git a/my-proof.manifest.template b/my-proof.manifest.template index 1d9e395..bc5048b 100644 --- a/my-proof.manifest.template +++ b/my-proof.manifest.template @@ -10,6 +10,9 @@ fs.mounts = [ { path = "/output", uri = "file:/output" }, ] +# Whitelist ENV variables that get passed to the enclave +loader.env.USER_EMAIL = { passthrough = true } + # Gramine gives a warning that allowed_files is not safe in production, but it # should generally be fine for our use case which inherently assumes that input # files are untrusted until proven otherwise.