Re: [PATCH V2 16/32] x86/sgx: Support restricting of enclave page permissions

From: Haitao Huang
Date: Thu Mar 17 2022 - 10:47:45 EST


On Wed, 16 Mar 2022 23:37:26 -0500, Jarkko Sakkinen <jarkko@xxxxxxxxxx> wrote:

On Mon, Mar 14, 2022 at 10:39:36AM -0500, Haitao Huang wrote:
I also see this model as consistent to what kernel does for regular memory
mappings: adding physical pages on #PF or pre-fault and changing PTE
permissions only after mprotect is called.

And you were against this in EAUG's case. As in the EAUG's case
EMODPR could be done as part of the mprotect() flow.


I preferred not automatic/unconditional EAUG during mmap.
Here I think automatic/unconditional EMODPR(PROT_READ) on #PF would not work for all cases. See my reply to your other email.

Thanks
Haitao