Received: by 2002:a05:6a10:6744:0:0:0:0 with SMTP id w4csp3820812pxu; Tue, 20 Oct 2020 01:02:39 -0700 (PDT) X-Google-Smtp-Source: ABdhPJz2l6WE37kv4p3JjD0+wbSM4YawaGHuaLfLWGGDqnXARTFxoJX5lf46D+K5vGDW4Hr8U2rN X-Received: by 2002:a50:9a86:: with SMTP id p6mr1512791edb.96.1603180959753; Tue, 20 Oct 2020 01:02:39 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1603180959; cv=none; d=google.com; s=arc-20160816; b=ac4e/MrYCvWBYOXoyIGCxFK5D4pp6h6e+doZwMHxqrgcwPbBf5eY+8Ul/kGC0WaKDk c0HEj9XOf4MG3PUM1kEDAPxD7bgCBNPMVcbqSG494mjO3wkcYrxSyMVHg9g3bUFptRaw SnpJ6CiPvQHVgtI72ovhaMvkh5A33S2gaQ/8ykNgEPrGk7zZT4RggVUV4ooKTD0xc3sm fkp92aSMVEXwjgPiVBz0ke67h1bThpkL7E35/QI/V7jgNohV7FYburhWT3LONk1Oxv7/ lWRSiM6df5nNFALVqriPAUp/SKkhFg1sVmdSyuBVmx4xbd6Bvx43S3FrRhURidEYu7TO 9+jg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:user-agent:in-reply-to:content-disposition :mime-version:references:message-id:subject:cc:to:from:date :ironport-sdr:ironport-sdr; bh=rShf5ugeW4y8bfSOPEQFz/FKPpI0r5SrYBUnVlwBhkY=; b=RLbZzcTfE2DHHjei8AiU3rH1JFbXfNUWyzWrvwNfB/jTop6LndB5CoF24o/JrQb600 iTmzbqsbZm7CmS4jPZfJ6ysRZcWnM7XbEdg1BwOkeWnqsvy5jfGcXVNUFFdCvydEKaj3 dQpgJtr00x7kGi0rfuCAGV6Kjy6BwxRagbCaryD63XHMf+g+gnmiSMjydFTtpUWQRR33 /6LIPDsQJBL9Qi7QS02xxmqyDwMe36Agv69qi3T0ItVfPOg+ORab4GjkSFVPXDxJYPFL G0xO8Nwe629RbTaejOS1T3tdZqMAA8xu2e3EiHcw50qTYgU46XHc/XmXDIzPNVj3KplJ S68A== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id g10si646229edm.124.2020.10.20.01.02.17; Tue, 20 Oct 2020 01:02:39 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1733069AbgJSVbN (ORCPT + 99 others); Mon, 19 Oct 2020 17:31:13 -0400 Received: from mga17.intel.com ([192.55.52.151]:10447 "EHLO mga17.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1733039AbgJSVbL (ORCPT ); Mon, 19 Oct 2020 17:31:11 -0400 IronPort-SDR: Xh7rBnV2ccaAPNT19RzzqvVqJ2N5nWhmLizzV3VQA6IK7fkI6UHqMGtPXw8c8Kjae7rdVaU48U rrpu8+t4cSLA== X-IronPort-AV: E=McAfee;i="6000,8403,9779"; a="146962948" X-IronPort-AV: E=Sophos;i="5.77,395,1596524400"; d="scan'208";a="146962948" X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga005.jf.intel.com ([10.7.209.41]) by fmsmga107.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 19 Oct 2020 14:31:08 -0700 IronPort-SDR: 1kt9jZOtoekxl6mGH3ucNF+7squprmoqQ5AiMFacq2KUEYAbYdIyCQaDuIOox4Jy8pW1HMU5m8 hpqnKfUm/RHw== X-IronPort-AV: E=Sophos;i="5.77,395,1596524400"; d="scan'208";a="532786087" Received: from sjchrist-coffee.jf.intel.com (HELO linux.intel.com) ([10.54.74.160]) by orsmga005-auth.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 19 Oct 2020 14:31:07 -0700 Date: Mon, 19 Oct 2020 14:31:05 -0700 From: Sean Christopherson To: "Dr. Greg" Cc: Dave Hansen , Jarkko Sakkinen , Haitao Huang , Andy Lutomirski , X86 ML , linux-sgx@vger.kernel.org, LKML , Linux-MM , Andrew Morton , Matthew Wilcox , Jethro Beekman , Darren Kenny , Andy Shevchenko , asapek@google.com, Borislav Petkov , "Xing, Cedric" , chenalexchen@google.com, Conrad Parker , cyhanish@google.com, "Huang, Haitao" , Josh Triplett , "Huang, Kai" , "Svahn, Kai" , Keith Moyer , Christian Ludloff , Neil Horman , Nathaniel McCallum , Patrick Uiterwijk , David Rientjes , Thomas Gleixner , yaozhangx@google.com Subject: Re: [PATCH v38 10/24] mm: Add vm_ops->mprotect() Message-ID: <20201019213105.GE23072@linux.intel.com> References: <20200924230501.GA20095@linux.intel.com> <20200925000052.GA20333@linux.intel.com> <32fc9df4-d4aa-6768-aa06-0035427b7535@intel.com> <20200925194304.GE31528@linux.intel.com> <230ce6da-7820-976f-f036-a261841d626f@intel.com> <20200928005347.GB6704@linux.intel.com> <6eca8490-d27d-25b8-da7c-df4f9a802e87@intel.com> <20201018084920.GA19255@wind.enjellic.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20201018084920.GA19255@wind.enjellic.com> User-Agent: Mutt/1.5.24 (2015-08-30) Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, Oct 18, 2020 at 03:49:20AM -0500, Dr. Greg wrote: > Is this even a relevant control if we cede the notion of dynamically > loadable enclave code, which is the objective of SGX2 hardware, which > will in all likelihood be the only relevant hardware implementation in > the future? Yes, it's still relevant. Giving the thumbs up to dynamically loadable code is not a purely binary decision, e.g. a user/admin can allow RW->RX transitions but still disallow full RWX permissions.