On Thu, Mar 28, 2019 at 6:19 AM Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx> wrote: > > On Wed, Mar 27, 2019 at 01:06:11PM -0700, Sean Christopherson wrote: > > I agree with all of the above, but unfortunately blacklisting is really > > the only benefit that would be realized by modularizing the driver. The > > "driver" at this point is just the device and its ioctls, the meat of > > the functionality has been moved into the subsystem proper. And the few > > remaining tidbits of functionality, e.g. sgx_encl_page_alloc() and > > sgx_encl_alloc(), probably should be moved out of ioctl.c as well. > > That is kind of core reason of having an LKM here, to wrap the uapi. It > is not about reducing size of the kernel. It is about ability to tailor > the uapi on stock kernels. > As I see it, there is really only one significant benefit of modules: reducing the size of the kernel in the case that the module isn't loaded. (And organizing module parameters, I suppose, but you don't, strictly speaking, need to be able to build as a module to do that.) SGX can be blacklisted by booting with nosgx (or, if if can't, then that should be added). --Andy
