On Mon, May 10, 2021 at 07:58:27AM -0700, Dave Hansen wrote: > On 5/10/21 7:52 AM, Jarkko Sakkinen wrote: > > +This can lead to reserving a large region than required by the payload, > > +but the address space can be obviously trimmed after the enclave has been > > +constructed on, > > +with a sequence of > > +.BR mmap(MAP_FIXED) > > +calls. > > Sorry if I missed this previously. > > But, do we really intend to suggest the use of mmap(MAP_FIXED) for this? > What's the harm in leaving a non-populated piece of address space of > mmap()'d /dev/sgx_enclave? Probably most of the time: not much. Especially since we support 64-bit only. Maybe it should be relaxed a bit? /Jarkko