Received: by 2002:ad5:474a:0:0:0:0:0 with SMTP id i10csp891268imu; Thu, 20 Dec 2018 07:00:35 -0800 (PST) X-Google-Smtp-Source: AFSGD/V0JfN+WXD+TlOasJSnizSZUB31dmT99wg7D8VvgH/Y8U6vqiugBg/nP3whq0Kkpo1JNItJ X-Received: by 2002:a62:ab0d:: with SMTP id p13mr24643638pff.211.1545318035096; Thu, 20 Dec 2018 07:00:35 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1545318035; cv=none; d=google.com; s=arc-20160816; b=U3QDmFRszIhLpNmzg6w8HmgyvC/1i+TWE3RMdc0GkTGSVHzmt8Nm87+1Efp2PlsNS2 i+2k/eqDG9LN51y68dvupFXhq0SAJ0YYf1yG2O6eB1yBsPRIusG1+e5xWgb9lWTp1WYW xL4fw8rh5aUXbCnZTu8nASmGCpn/lOngKVsXtSFQzUODcWUhuhc4UAjVICuxBBS2iF8J 4x4r1ReDC5oy3Cd4oGOxEJmQ50jtpgUU/byVqZkdBhEa5vDBrmpI2fXGRZdzXm9IInRi EBuDub6XHL6ug2bfb5v/IbGK5JNACKg26dr2B1cVWky3EnrOdI1wJABS+SGUptT4pFF5 7A+Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:organization:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date; bh=4s61wKmnbCNEL5mvPmHe7QbctVZtvHYeG8Sr/bRG85o=; b=ezM+gk4zxNqqCyrOcv1WwALxVsHpjxcUIcDEi1st0anX0cBNhLDk8V+vf9YZebYAfO ZBMvvYxFfoeQ2dCD/HSi+AIX/rzsaKyFZbWmb+3zP/4OmvTipc6g5YlWvLlbPRmFFVtQ uTFz1py3y3qbly039k3fRVxAutWmVkR3BtXrX2vgun1JF5Glom+Wq3sXKIYlqFMn9CT3 2zduoUIfIh+R5Zgi0bu/h0BF+KEl8KtdbFxZCzEfIqR3P40vuVw0nvzQ2eOTSx0SEyyt UTQCkC3zT75KjhcxHh+XSBj9uKFEK+S1eqVq7NBuW8sChdruQcmBJBijtujI9tbeBBOR 5CJg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id 14si16347955pgx.178.2018.12.20.07.00.06; Thu, 20 Dec 2018 07:00:35 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729396AbeLTKcM (ORCPT + 99 others); Thu, 20 Dec 2018 05:32:12 -0500 Received: from mga12.intel.com ([192.55.52.136]:64354 "EHLO mga12.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727502AbeLTKcM (ORCPT ); Thu, 20 Dec 2018 05:32:12 -0500 X-Amp-Result: UNKNOWN X-Amp-Original-Verdict: FILE UNKNOWN X-Amp-File-Uploaded: False Received: from fmsmga001.fm.intel.com ([10.253.24.23]) by fmsmga106.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Dec 2018 02:32:12 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.56,376,1539673200"; d="scan'208";a="131535390" Received: from quwen-mobl.ccr.corp.intel.com (HELO localhost) ([10.249.254.215]) by fmsmga001.fm.intel.com with ESMTP; 20 Dec 2018 02:32:05 -0800 Date: Thu, 20 Dec 2018 12:32:04 +0200 From: Jarkko Sakkinen To: Andy Lutomirski Cc: Sean Christopherson , Jethro Beekman , Thomas Gleixner , Ingo Molnar , Borislav Petkov , "x86@kernel.org" , Dave Hansen , Peter Zijlstra , "H. Peter Anvin" , "linux-kernel@vger.kernel.org" , "linux-sgx@vger.kernel.org" , Josh Triplett , Haitao Huang , "Dr . Greg Wettstein" Subject: Re: x86/sgx: uapi change proposal Message-ID: <20181220103204.GB26410@linux.intel.com> References: <20181214215729.4221-1-sean.j.christopherson@intel.com> <7706b2aa71312e1f0009958bcab24e1e9d8d1237.camel@linux.intel.com> <598cd050-f0b5-d18c-96a0-915f02525e3e@fortanix.com> <20181219091148.GA5121@linux.intel.com> <613c6814-4e71-38e5-444a-545f0e286df8@fortanix.com> <20181219144515.GA30909@linux.intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Organization: Intel Finland Oy - BIC 0357606-4 - Westendinkatu 7, 02160 Espoo User-Agent: Mutt/1.10.1 (2018-07-13) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Dec 19, 2018 at 06:58:48PM -0800, Andy Lutomirski wrote: > Can one of you explain why SGX_ENCLAVE_CREATE is better than just > opening a new instance of /dev/sgx for each encalve? I think that fits better to the SCM_RIGHTS scenario i.e. you could send the enclav to a process that does not have necessarily have rights to /dev/sgx. Gives more robust environment to configure SGX. /Jarkko