On Tue, 17 Oct 2023 at 02:08, <jeffxu@xxxxxxxxxxxx> wrote: > > Of all the call paths that call into do_vmi_munmap(), > this is the only place where checkSeals = MM_SEAL_MUNMAP. > The rest has checkSeals = 0. Why? None of this makes sense. So you say "we can't munmap in this *one* place, but all others ignore the sealing". Crazy. Linus