On 4/25/25 10:40, Sean Christopherson wrote: > So then why on earth is the kernel implementing automatic updates?
Because it's literally the least amount of code and doesn't create any new ABI. > I read back through most of the cover letters, and IIUC, we went > straight from "destroy all enclaves and force an update" to "blindly > try to do EUPDATESVN every time the number of enclaves goes from > 0=>1". Those are essentially the two most extreme options. I'm sure we can think of a bunch more extreme things. How about after every ENCLS? ;)