Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>, Andy Lutomirski <luto@xxxxxxxxxx>
Subject: Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)
From: Jethro Beekman <jethro@xxxxxxxxxxxx>
Date: Tue, 21 May 2019 15:24:18 +0000
Accept-language: en-US
Cc: Sean Christopherson <sean.j.christopherson@xxxxxxxxx>, James Morris <jmorris@xxxxxxxxx>, "Serge E. Hallyn" <serge@xxxxxxxxxx>, LSM List <linux-security-module@xxxxxxxxxxxxxxx>, Paul Moore <paul@xxxxxxxxxxxxxx>, Stephen Smalley <sds@xxxxxxxxxxxxx>, Eric Paris <eparis@xxxxxxxxxxxxxx>, "selinux@xxxxxxxxxxxxxxx" <selinux@xxxxxxxxxxxxxxx>, "Xing, Cedric" <cedric.xing@xxxxxxxxx>, "Hansen, Dave" <dave.hansen@xxxxxxxxx>, Thomas Gleixner <tglx@xxxxxxxxxxxxx>, "Dr. Greg" <greg@xxxxxxxxxxxx>, Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>, LKML <linux-kernel@xxxxxxxxxxxxxxx>, X86 ML <x86@xxxxxxxxxx>, "linux-sgx@xxxxxxxxxxxxxxx" <linux-sgx@xxxxxxxxxxxxxxx>, Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>, "nhorman@xxxxxxxxxx" <nhorman@xxxxxxxxxx>, "npmccallum@xxxxxxxxxx" <npmccallum@xxxxxxxxxx>, "Ayoun, Serge" <serge.ayoun@xxxxxxxxx>, "Katz-zamir, Shay" <shay.katz-zamir@xxxxxxxxx>, "Huang, Haitao" <haitao.huang@xxxxxxxxx>, Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>, "Svahn, Kai" <kai.svahn@xxxxxxxxx>, Borislav Petkov <bp@xxxxxxxxx>, Josh Triplett <josh@xxxxxxxxxxxxxxxx>, "Huang, Kai" <kai.huang@xxxxxxxxx>, David Rientjes <rientjes@xxxxxxxxxx>
In-reply-to: <20190521151836.GA4843@linux.intel.com>
References: <20190513102926.GD8743@linux.intel.com> <20190514104323.GA7591@linux.intel.com> <CALCETrVbgTCnPo=PAq0-KoaRwt--urrPzn==quAJ8wodCpkBkw@mail.gmail.com> <20190514204527.GC1977@linux.intel.com> <CALCETrX6aL367mMJh5+Y1Seznfu-AvhPV6P7GkWF4Dhu0GV8cw@mail.gmail.com> <20190515013031.GF1977@linux.intel.com> <CALCETrXf8mSK45h7sTK5Wf+pXLVn=Bjsc_RLpgO-h-qdzBRo5Q@mail.gmail.com> <20190517000331.GD11204@linux.intel.com> <CALCETrWxw7xALE0kmiYBzomaSMAeXEVq-7rX7xeqPtDPeDQiCA@mail.gmail.com> <20190520114105.GD27805@linux.intel.com> <20190521151836.GA4843@linux.intel.com>

On 2019-05-21 08:19, Jarkko Sakkinen wrote:

We could even disallow mmap() before EINIT done.

This would be extremely annoying in software because now you have tosave the all the page permissions somewhere between EADD and mprotect.


--
Jethro Beekman | Fortanix

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Follow-Ups:
- Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)
  - From: Jarkko Sakkinen

References:
- SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)
  - From: Andy Lutomirski
- Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)
  - From: Sean Christopherson
- Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)
  - From: Andy Lutomirski
- Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)
  - From: Jarkko Sakkinen
- Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)
  - From: Jarkko Sakkinen

Prev by Date: Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)
Next by Date: Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)
Previous by thread: Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)
Next by thread: Re: SGX vs LSM (Re: [PATCH v20 00/28] Intel SGX1 support)
Index(es):
- Date
- Thread

[Index of Archives] [Selinux Refpolicy] [Linux SGX] [Fedora Users] [Fedora Desktop] [Yosemite Photos] [Yosemite Camping] [Yosemite Campsites] [KDE Users] [Gnome Users]