From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.2 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 05082C34026 for ; Tue, 18 Feb 2020 15:52:59 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id CE80422527 for ; Tue, 18 Feb 2020 15:52:58 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726549AbgBRPw6 (ORCPT ); Tue, 18 Feb 2020 10:52:58 -0500 Received: from mga14.intel.com ([192.55.52.115]:24692 "EHLO mga14.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726546AbgBRPw6 (ORCPT ); Tue, 18 Feb 2020 10:52:58 -0500 X-Amp-Result: UNKNOWN X-Amp-Original-Verdict: FILE UNKNOWN X-Amp-File-Uploaded: False Received: from orsmga003.jf.intel.com ([10.7.209.27]) by fmsmga103.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 18 Feb 2020 07:52:58 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.70,456,1574150400"; d="scan'208";a="235569654" Received: from unknown (HELO localhost) ([10.252.15.149]) by orsmga003.jf.intel.com with ESMTP; 18 Feb 2020 07:52:54 -0800 Date: Tue, 18 Feb 2020 17:52:47 +0200 From: Jarkko Sakkinen To: "Dr. Greg Wettstein" Cc: Jethro Beekman , Sean Christopherson , Andy Lutomirski , "linux-sgx@vger.kernel.org" , "serge.ayoun@intel.com" , "shay.katz-zamir@intel.com" Subject: Re: x86/sgx: v23-rc2 Message-ID: <20200218155247.GA18374@linux.intel.com> References: <20191010113745.GA12842@linux.intel.com> <20191011181550.GB30935@linux.intel.com> <8dc2ab24-baf1-5e57-3906-35e7286f7ffe@fortanix.com> <20191017175735.GD20903@linux.intel.com> <20200215072406.GA9958@linux.intel.com> <20200217185512.GA7677@linux.intel.com> <20200218104243.GA13967@wind.enjellic.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20200218104243.GA13967@wind.enjellic.com> Organization: Intel Finland Oy - BIC 0357606-4 - Westendinkatu 7, 02160 Espoo User-Agent: Mutt/1.10.1 (2018-07-13) Sender: linux-sgx-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-sgx@vger.kernel.org On Tue, Feb 18, 2020 at 04:42:43AM -0600, Dr. Greg Wettstein wrote: > I believe an accurate summary of Dr. Beekman's concerns are as > follows: > > 1.) He envisions a need for an enclave orchestrator that uses root > privileges to open the SGX driver device and then drop privileges, > presumably in a permanent fashion. The orchestrator would then use > the filehandle to load and initialize multiple enclaves on request. > > 2.) The enclave orchestrator may be run in an environment that has > SECCOMP limitations on the ability to conduct filesystem operations. Also UDS sockets with SCM_RIGHTS should work. /Jarkko