On Tue, Nov 27, 2018 at 02:55:33AM -0600, Dr. Greg wrote: > 3.) Enclaves with the SGX_FLAGS_LICENSE_KEY attribute set - i.e., 'Launch > Enclaves'. Kernel does not have to manage this. If the MSRs are read-only, they should match your LE. If the MSRs writable, you don't need an LE. This whole scheme sounds like adding own SELinux for SGX and it is only words. No code available. /Jarkko
