Thanks for sending this, Andrew! I think I'll probably add a slightly shorter summary:
tl;dr: SGX page reclaim touches the page to copy its contents to secondary storage. SGX instructions do not gracefully handle machine checks. Despite this, the existing SGX code will try to reclaim pages that it _knows_ are poisoned. Avoid even trying to reclaim poisoned pages. But otherwise it looks great: Acked-by: Dave Hansen <dave.han...@linux.intel.com>
