On Tue, 17 Oct 2023 at 02:08, jeffxu@chromium.org wrote:
Of all the call paths that call into do_vmi_munmap(), this is the only place where checkSeals = MM_SEAL_MUNMAP. The rest has checkSeals = 0.
Why?
None of this makes sense.
So you say "we can't munmap in this *one* place, but all others ignore the sealing".
Crazy.
Linus