Re: Re: [PATCH v12 00/18] Enable FSGSBASE instructions

[Wojtek Porczyk]

On Wed, May 27, 2020 at 11:20:08AM +0300, Jarkko Sakkinen wrote:
> On Fri, 2020-05-22 at 16:14 -0400, Don Porter wrote:
> > legacy code in SGX.  We have been following LKML discussions on this 
> > instruction for years, and hoping this feature would be supported by 
> > Linux, so that we can retire this module.  To our knowledge, every SGX 
> 
> Why have you followed this for years and never tried the patches?

For all the reasons stated before (we preferred a module, not a patchset, and
we didn't really care about implications), and because the general situation
about kernel drivers is a mess: Intel made three, mutually incompatible linux
drivers [1] and we used SDK driver, which incidentally is also how people
learn SGX programming in general.

With three different drivers and unclear future directions, we chose to wait
and see how the situation settles, so we stuck to the driver that was already
working.

Also, we're no kernel developers and there were/still are more urgent things
to fix in the graphene proper. For example we only recently have support for
running non-debug enclaves using DCAP LE [2].

[1] Here are my notes from when I was figuring out:
    https://graphene.rtfd.io/en/latest/sgx-intro.html#linux-kernel-drivers

[2] https://github.com/oscarlab/graphene/issues/881
    https://github.com/oscarlab/graphene/pull/978

-- 
pozdrawiam / best regards
Wojtek Porczyk
Graphene / Invisible Things Lab
 
 I do not fear computers,
 I fear lack of them.
    -- Isaac Asimov

Attachment: signature.asc
Description: PGP signature