On 7/22/22 12:00, Sean Christopherson wrote: > /* > * Assert that KVM explicitly allows or denies exposing all > * features, i.e. detect attempts to add kernel support without > * also updating KVM. > */ > BUILD_BUG_ON((KVM_SGX_ATTR_ALLOWED_MASK | KVM_SGX_ATTR_DENIED_MASK) != > (SGX_ATTR_PRIV_MASK | SGX_ATTR_UNPRIV_MASK)); Looks good to me. I'll do that for the next version. Thanks!