On Mon, Nov 05, 2018 at 12:27:11PM -0800, Dave Hansen wrote: > This patch set establishes an ABI. It basically sets in stone a bunch > of behaviors that the enclave, the kernel, and the out-of-enclave code > must follow. > > There are a bunch of things that the enclave can do to %rsp or %rip, for > instance, that it is capable and/or permitted to do. Just want to ask a follow-up from this so that I understand you better. Now we are talking abou ioctl API, right? I'm not exactly sure how EENTER/EEXIT/ERESUME behavior connects to that. I understand the tail of your message but this paragraph left me a bit puzzled... /Jarkko