Messages in this thread | | | From | Jethro Beekman <> | Subject | Re: [PATCH v20 00/28] Intel SGX1 support | Date | Fri, 19 Apr 2019 21:35:32 +0000 |
| |
On 2019-04-19 14:31, Andy Lutomirski wrote: > I do think we need to follow LSM rules. But my bigger point is that there are policies that don’t allow JIT at all. I think we should arrange the SGX API so it’s still usable when such a policy is in effect.
I don't think we need to arrange that right now. This patch set needs to be merged after more than 2 years of development. I'd like to avoid introducing any more big changes. Let's just do what I described to make LSM not broken, which is a minimal change to the current approach. We can adjust the API later to support the use case you describe.
-- Jethro Beekman | Fortanix
| |