Demystifying the Secure Enclave Processor
LytVKz
LytVKz
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
No-Execute Protection<br />
• SEPOS implements no-execute protection<br />
• Always set when a page is not marked as<br />
executable<br />
▫ space_t::map_fpage()<br />
▫ Sets both XN and PXN bits in page table entries<br />
• Non-secure (NS) bit also set for all pages outside<br />
SEP memory region