Messages in this thread | | | Date | Wed, 22 May 2019 16:10:04 +0300 | From | Jarkko Sakkinen <> | Subject | Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support) |
| |
On Tue, May 21, 2019 at 03:24:18PM +0000, Jethro Beekman wrote: > On 2019-05-21 08:19, Jarkko Sakkinen wrote: > > We could even disallow mmap() before EINIT done. > This would be extremely annoying in software because now you have to save > the all the page permissions somewhere between EADD and mprotect.
Actually you don't have to use mprotect anymore that much.
You can just do multiple mmap's even with v20 after EINIT, one for each region (albeit it does not enforce above).
/Jarkko
| |