On Tue, Mar 09, 2021, Kai Huang wrote: > + if (cpu_has(c, X86_FEATURE_SGX) && IS_ENABLED(CONFIG_X86_SGX)) { > + /* > + * Separate out SGX driver enabling from KVM. This allows KVM > + * guests to use SGX even if the kernel SGX driver refuses to > + * use it. This happens if flexible Faunch Control is not /Faunch/Launch Clever handling of the multitude of combinations!