Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)

[Jethro Beekman]

On 2019-05-21 08:19, Jarkko Sakkinen wrote:

We could even disallow mmap() before EINIT done.

This would be extremely annoying in software because now you have to save the all the page permissions somewhere between EADD and mprotect.

--
Jethro Beekman | Fortanix

smime.p7s
Description: S/MIME Cryptographic Signature