Messages in this thread | | | Date | Thu, 20 Dec 2018 12:32:04 +0200 | From | Jarkko Sakkinen <> | Subject | Re: x86/sgx: uapi change proposal |
| |
On Wed, Dec 19, 2018 at 06:58:48PM -0800, Andy Lutomirski wrote: > Can one of you explain why SGX_ENCLAVE_CREATE is better than just > opening a new instance of /dev/sgx for each encalve?
I think that fits better to the SCM_RIGHTS scenario i.e. you could send the enclav to a process that does not have necessarily have rights to /dev/sgx. Gives more robust environment to configure SGX.
/Jarkko
| |