On Wed Jul 19, 2023 at 5:24 PM EEST, Jo Van Bulck wrote: > While I understand that the bare-metal Intel SGX selftest enclave is > certainly not intended as a full-featured independent production runtime, > it has been noted on this mailing list before that "people are likely to > copy this code for their own enclaves" and that it provides a "great > starting point if you want to do things from scratch" [1]. Thus, proper and > complete example code is vital for security-sensitive functionality, like the > selftest example enclave. If anyone copied the source code for their own enclave, they would have to publish their source code, given the GPLv2 license. There's a lot of source code in kselftest, which probably has at least some security issues. I'm not sure, at least based on this motivation, why would we care? BR, Jarkko
