Received: by 2002:ad5:474a:0:0:0:0:0 with SMTP id i10csp456068imu; Mon, 26 Nov 2018 13:18:29 -0800 (PST) X-Google-Smtp-Source: AFSGD/UrlC29e1xE2Evwim1w/EhJhSTNy4wgf0tkxban7/QHB5qtpNDOEHeeADjoEbNxcqRgp84J X-Received: by 2002:a63:b105:: with SMTP id r5mr26789271pgf.442.1543267108950; Mon, 26 Nov 2018 13:18:28 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1543267108; cv=none; d=google.com; s=arc-20160816; b=r2/KR3ZzG2/qM4yJsSHFVuMfvFBUSAbdxOHfk3qlahn0hpbdKe3Y0DtPCUErEtad/P AM4k97O7PcZxwgxDyqt3Llp+k+djdo8VZNECk6rryUb+J0p+WaXwZONwBSzRQzTNnYbK t1hWtYPJTKKsKdEADOa8v6k4szPoAm0vet1PGs/P4RMQyfBJLIXAASt5JvbciWFJ/Cc8 GsozgLoW1yGroIjJOG9jUOb60VJaKl7i/HDaXKGiZ3X8arCfUHEvzrdRjAp34yZiPpQu MaBvyOykAcEOuVqAt3SR7an/TEYvZnsgWrbcs+xoCkKIuHtjpjcbV4HmYbNoElFQjZn3 7/zw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:organization:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date; bh=sVDwAbWIfUiN7+p3XoKBaxxa/WJ2o6kelOVVwW+LbA8=; b=DVVoDLW1NPkk/WdjtH3DT0yRWhs58yO7eGliwPTnceTsLKwXkxPFxBdk0uiUvWizs3 XMHRw0XhZipl18MKc3vDH4yhEqmo+0qcGIQ0qjIIeZ2CQ1a98csUjjB3I17Ip89bAsii BJiPZG6/HoMWEXLXHSb3a3PsXqzj0WiAyIBVHI7eOtURVqR6EOjPrZgQnYPQcs3RYQGz 0lXZIFCvaJhg3ThWRSCbUabWibKT7u2QJurSTM0iP2wUEX2AGCK+SyVVxvWy/isn4ZFq B3QLhI3ntG7stgTMyW6gprytXGrH/G3nVahh/YU4NvmYw4CoQXZ2cA1QRD1iZ+mebFPI yk3A== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id z5si1402528pgu.19.2018.11.26.13.18.11; Mon, 26 Nov 2018 13:18:28 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727420AbeK0ILJ (ORCPT + 99 others); Tue, 27 Nov 2018 03:11:09 -0500 Received: from mga09.intel.com ([134.134.136.24]:32321 "EHLO mga09.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727107AbeK0ILJ (ORCPT ); Tue, 27 Nov 2018 03:11:09 -0500 X-Amp-Result: UNSCANNABLE X-Amp-File-Uploaded: False Received: from fmsmga003.fm.intel.com ([10.253.24.29]) by orsmga102.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 26 Nov 2018 13:15:43 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.56,283,1539673200"; d="scan'208";a="99509433" Received: from jsakkine-mobl1.jf.intel.com (HELO localhost) ([10.24.8.61]) by FMSMGA003.fm.intel.com with ESMTP; 26 Nov 2018 13:15:42 -0800 Date: Mon, 26 Nov 2018 13:15:43 -0800 From: Jarkko Sakkinen To: "Dr. Greg" Cc: Andy Lutomirski , X86 ML , Platform Driver , linux-sgx@vger.kernel.org, Dave Hansen , "Christopherson, Sean J" , nhorman@redhat.com, npmccallum@redhat.com, "Ayoun, Serge" , shay.katz-zamir@intel.com, haitao.huang@linux.intel.com, Andy Shevchenko , Thomas Gleixner , "Svahn, Kai" , mark.shanahan@intel.com, Suresh Siddha , Ingo Molnar , Borislav Petkov , "H. Peter Anvin" , Darren Hart , Andy Shevchenko , LKML Subject: Re: [PATCH v17 18/23] platform/x86: Intel SGX driver Message-ID: <20181126211543.GB868@linux.intel.com> References: <20181116010412.23967-1-jarkko.sakkinen@linux.intel.com> <20181116010412.23967-19-jarkko.sakkinen@linux.intel.com> <20181119161917.GF13298@linux.intel.com> <20181120120442.GA22172@linux.intel.com> <20181122111253.GA31150@wind.enjellic.com> <20181124172114.GB32210@linux.intel.com> <20181124201318.GB12149@wind.enjellic.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20181124201318.GB12149@wind.enjellic.com> Organization: Intel Finland Oy - BIC 0357606-4 - Westendinkatu 7, 02160 Espoo User-Agent: Mutt/1.10.1 (2018-07-13) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, Nov 24, 2018 at 02:13:18PM -0600, Dr. Greg wrote: > This isn't about an enclave being able to tell that it is really an > enclave. As I noted in my previous reply, access to the provisioning > bit allows an enclave author to create a perpetual hardware identifier > for a platform based on a signing key of their choosing, along with a > few other incidentals, all of which are completely under the control > of the enclave author. I think I'm now in the same page with the issue now. Thanks for the patience explaining this. /Jarkko