Received: by 2002:a25:c205:0:0:0:0:0 with SMTP id s5csp7131966ybf; Fri, 6 Mar 2020 11:00:47 -0800 (PST) X-Google-Smtp-Source: ADFU+vs3pE1u2XT/hwB7Y3Ihka1w/1+VKjBIEfd92dohkXiruHVUr3Lc0nUB53ATNoTpt1itIq/n X-Received: by 2002:a05:6830:1615:: with SMTP id g21mr3854052otr.49.1583521247047; Fri, 06 Mar 2020 11:00:47 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1583521247; cv=none; d=google.com; s=arc-20160816; b=gjH/6hV+E9w5aOyD46oeFwlR10EE88f6IX4Da6Kt6ojnap/IvMPsjC5qY2gTUrhCgY gZQu6LYo0wGLpAGFGIJ1vQiRR/b6sjN2ti9mAUVtkvifgPDpE3DYBcRaFcvcLCSlw1/Q 8J4eUai/arbUVXByPJMhyfxUMO5QDOTh9aS5bT1dgeW7J9C/ta3/+/AN4N6jWi1R8Kll 1jFErqLr13ramubZioes73ZMTMBPp6btV9SAJLjwdMkcSwwOz8VWMSLdcJSyHEpA0Mxw b77hksZpkV+BEHmX4IJ/+R1VYARHWoW1Z7k1130PWP8nHrnUHTQAuZiwbDN6G7CxPYn1 mSLw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:organization:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date; bh=mbqKuf7nTV+OZlvgxXWecxWXT16uWL1BObu+O9s6EMA=; b=IuYuDltKkg6UrYPkgKJ0iORteFYrcdkkXJGQXAr0WXfT7sDXc1qB9BXprGPJCNmNZd 9hsrl9L2z1l0duoXWX0LqLNzMD31UsZMvB75JLGI2nlW+BKtxLpIXKZJIuZTpOktBJlJ nTev3Xv4a8GxOJRcNEPVDI+k9QvxGOFJhNs5fngRlPEa5RKJx0x28Hr5nHquDLO2uZMh 2iqDy/3NKuWP/2To8k8qYazTfCiM90kJp/4gI+CVklBLLLH/kdE2js4GSltlBWTVpe1V 5M4BK5yrtCnXB0Buhcn+WgJZ/DQfsTo/T25Hc0staMlmHc7JE8K+koceEBQq+O/f3Ttv NJUw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id w5si1817429otq.238.2020.03.06.11.00.33; Fri, 06 Mar 2020 11:00:47 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726579AbgCFTAL (ORCPT + 99 others); Fri, 6 Mar 2020 14:00:11 -0500 Received: from mga12.intel.com ([192.55.52.136]:30586 "EHLO mga12.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726083AbgCFTAL (ORCPT ); Fri, 6 Mar 2020 14:00:11 -0500 X-Amp-Result: UNKNOWN X-Amp-Original-Verdict: FILE UNKNOWN X-Amp-File-Uploaded: False Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by fmsmga106.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 06 Mar 2020 11:00:10 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.70,523,1574150400"; d="scan'208";a="275644114" Received: from wbakowsk-mobl.ger.corp.intel.com (HELO localhost) ([10.252.27.142]) by fmsmga002.fm.intel.com with ESMTP; 06 Mar 2020 11:00:04 -0800 Date: Fri, 6 Mar 2020 21:00:03 +0200 From: Jarkko Sakkinen To: Jethro Beekman Cc: Sean Christopherson , linux-kernel@vger.kernel.org, x86@kernel.org, linux-sgx@vger.kernel.org, akpm@linux-foundation.org, dave.hansen@intel.com, nhorman@redhat.com, npmccallum@redhat.com, haitao.huang@intel.com, andriy.shevchenko@linux.intel.com, tglx@linutronix.de, kai.svahn@intel.com, bp@alien8.de, josh@joshtriplett.org, luto@kernel.org, kai.huang@intel.com, rientjes@google.com, cedric.xing@intel.com, puiterwijk@redhat.com, linux-security-module@vger.kernel.org, Suresh Siddha , Haitao Huang , Chunyang Hui Subject: Re: [PATCH v28 11/22] x86/sgx: Linux Enclave Driver Message-ID: <20200306190003.GF7472@linux.intel.com> References: <20200303233609.713348-1-jarkko.sakkinen@linux.intel.com> <20200303233609.713348-12-jarkko.sakkinen@linux.intel.com> <20200305174015.GJ11500@linux.intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Organization: Intel Finland Oy - BIC 0357606-4 - Westendinkatu 7, 02160 Espoo Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Mar 05, 2020 at 07:24:11PM +0100, Jethro Beekman wrote: > On 2020-03-05 18:40, Sean Christopherson wrote: > > On Wed, Mar 04, 2020 at 01:35:58AM +0200, Jarkko Sakkinen wrote: > >> diff --git a/arch/x86/include/uapi/asm/sgx.h b/arch/x86/include/uapi/asm/sgx.h > >> new file mode 100644 > >> index 000000000000..5edb08ab8fd0 > >> --- /dev/null > >> +++ b/arch/x86/include/uapi/asm/sgx.h > >> @@ -0,0 +1,66 @@ > >> +/* SPDX-License-Identifier: (GPL-2.0 OR BSD-3-Clause) WITH Linux-syscall-note */ > >> +/* > >> + * Copyright(c) 2016-19 Intel Corporation. > >> + */ > >> +#ifndef _UAPI_ASM_X86_SGX_H > >> +#define _UAPI_ASM_X86_SGX_H > >> + > >> +#include > >> +#include > >> + > >> +/** > >> + * enum sgx_epage_flags - page control flags > >> + * %SGX_PAGE_MEASURE: Measure the page contents with a sequence of > >> + * ENCLS[EEXTEND] operations. > >> + */ > >> +enum sgx_page_flags { > >> + SGX_PAGE_MEASURE = 0x01, > >> +}; > >> + > >> +#define SGX_MAGIC 0xA4 > >> + > >> +#define SGX_IOC_ENCLAVE_CREATE \ > >> + _IOW(SGX_MAGIC, 0x00, struct sgx_enclave_create) > >> +#define SGX_IOC_ENCLAVE_ADD_PAGES \ > >> + _IOWR(SGX_MAGIC, 0x01, struct sgx_enclave_add_pages) > >> +#define SGX_IOC_ENCLAVE_INIT \ > >> + _IOW(SGX_MAGIC, 0x02, struct sgx_enclave_init) > >> + > >> +/** > >> + * struct sgx_enclave_create - parameter structure for the > >> + * %SGX_IOC_ENCLAVE_CREATE ioctl > >> + * @src: address for the SECS page data > >> + */ > >> +struct sgx_enclave_create { > >> + __u64 src; > > > > Would it make sense to add reserved fields to the structs so that new > > features can be added in a backwards compatible way? E.g. if we want to > > allow userspace to control the backing store by passing in a file > > descriptor ENCLAVE_CREATE. > > Reserving space for future fields is not necessary because the size of > the struct is encoded in the ioctl number. The kernel can use this to > differentiate between different call versions from userspace. Sure but I still would never change the signature once a ioctl is added. /Jarkko