On Mon, Mar 14, 2022 at 05:42:43AM +0200, Jarkko Sakkinen wrote: > On Fri, Mar 11, 2022 at 11:28:27AM -0800, Reinette Chatre wrote: > > Supporting permission restriction in an ioctl() enables the runtime to manage > > the enclave memory without needing to map it. > > Which is opposite what you do in EAUG. You can also augment pages without > needing the map them. Sure you get that capability, but it is quite useless > in practice. Essentially you are tuning for a niche artifical use case over the common case that most people end up doing. It makes no sense. BR, Jarkko