System, method, and computer program product for scoping operating system semanticis in a computing environment supporting multi-enclave processes

摘要

Scoping operating system semantics in a computing environment, wherein a process comprising at least one enclave is executing in the computing environment, is disclosed. Such scoping is performed by determining whether an operating system semantic is explicitly directed to the process, or whether the operating system semantic is implicitly directed to the process. If the operating system semantic is explicitly directed to the process, then the operating system semantic is scoped to the process. If the operating system semantic is implicitly directed to the process, then the operating system semantic is scoped to an enclave of the process in which the operating system semantic occurs.