lkml.org 
[lkml]   [2020]   [Nov]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [PATCH v40 10/24] mm: Add 'mprotect' hook to struct vm_operations_struct
    From
    Date
    On 11/6/20 9:43 AM, Dr. Greg wrote:
    > In light of this, given the decision by the driver authors to not
    > fully equip the driver with EDMM support, the mprotect protection
    > requirements are straight forward and minimalistic. All that is
    > needed is a binary valued variable, set on the command-line, that
    > either allows or denies anonymous code execution by an enclave,
    > ie. access to page protection changes after initialization.

    To that, I say NAK. We need more flexibility than a boot-time-fixed,
    system-wide switch.

    \
     
     \ /
      Last update: 2020-11-06 18:55    [W:4.520 / U:0.080 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site