Re: [PATCH v12 00/18] Enable FSGSBASE instructions

[Jarkko Sakkinen]

On Mon, 2020-05-18 at 11:51 +0200, Thomas Gleixner wrote:
> Sasha Levin <sashal@xxxxxxxxxx> writes:
> > On Fri, May 15, 2020 at 12:24:14PM +0300, Jarkko Sakkinen wrote:
> > > Can you put me to the CC-loop for this patches. Some SGX-enabled
> > > frameworks such as Graphene use out-of-tree changes to achieve this.
> > > That's where the interest to possibly test this comes from.
> > 
> > Indeed, we've seen a few hacks that basically just enable FSGSBASE:
> > 
> >  - https://github.com/oscarlab/graphene-sgx-driver
> >  - https://github.com/occlum/enable_rdfsbase
> 
> I'm really amazed by all these security experts enabling a full root
> hole. It clearly puts the SGX hypocrisy into perspective.
> 
> Thanks,
> 
>         tglx

That's exactly why I'm interested to test this series.

/Jarkko