Messages in this thread | | | Date | Mon, 28 Feb 2022 13:24:58 +0100 | From | Jarkko Sakkinen <> | Subject | Re: [PATCH V2 16/32] x86/sgx: Support restricting of enclave page permissions |
| |
On Wed, Feb 23, 2022 at 07:21:50PM +0000, Dhanraj, Vijay wrote: > Hi All, > > Regarding the recent update of splitting the page permissions change > request into two IOCTLS (RELAX and RESTRICT), can we combine them into > one? That is, revert to how it was done in the v1 version?
They are logically separate complex functionalities:
1. "restrict" calls EMODPR and requires EACCEPT 2. "relax" increases permissions up to vetted ("EADD") and could be combined with EMODPE called inside enclave.
I don't think it is a good idea.
BR, Jarkko
| |