Messages in this thread | | | Date | Mon, 19 Oct 2020 14:31:05 -0700 | From | Sean Christopherson <> | Subject | Re: [PATCH v38 10/24] mm: Add vm_ops->mprotect() |
| |
On Sun, Oct 18, 2020 at 03:49:20AM -0500, Dr. Greg wrote: > Is this even a relevant control if we cede the notion of dynamically > loadable enclave code, which is the objective of SGX2 hardware, which > will in all likelihood be the only relevant hardware implementation in > the future?
Yes, it's still relevant. Giving the thumbs up to dynamically loadable code is not a purely binary decision, e.g. a user/admin can allow RW->RX transitions but still disallow full RWX permissions.
| |