Skip to content

Commit

Permalink
Enable /dev/sgx_vepc access for the group 'sgx'
Browse files Browse the repository at this point in the history
Enable /dev/sgx_vepc access for the group 'sgx', which allows KVM-backed VMs
to host Intel Software Guard eXtension (SGX) enclaves. The upcoming QEMU
6.2 uses /dev/sgx_vepc to reserve portions of Enclave Page Cache (EPC) for
VMs. EPC is the reserved physical memory used for hosting enclaves.
  • Loading branch information
jarkkojs authored and bluca committed Dec 12, 2021
1 parent 6d7bc74 commit b5d3138
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions rules.d/50-udev-default.rules.in
Expand Up @@ -41,6 +41,7 @@ SUBSYSTEM=="drm", KERNEL=="renderD*", GROUP="render", MODE="{{GROUP_RENDER_MODE}
SUBSYSTEM=="kfd", GROUP="render", MODE="{{GROUP_RENDER_MODE}}"

SUBSYSTEM=="misc", KERNEL=="sgx_enclave", GROUP="sgx", MODE="0660"
SUBSYSTEM=="misc", KERNEL=="sgx_vepc", GROUP="sgx", MODE="0660"

# When using static_node= with non-default permissions, also update
# tmpfiles.d/static-nodes-permissions.conf.in to keep permissions synchronized.
Expand Down

0 comments on commit b5d3138

Please sign in to comment.