sgx_enclave_..._permissions(9)

📦 version 7.3.1, in nixpkgs unstable

✨ sgx_enclave_restrict_permissions — bestie's guide to locking down EPCM perms ✨

Okay so first things first, this is a page from the Kernel API Manual (section 9, kernel-space girlies only 💅), and it's all about sgx_enclave_restrict_permissions — yes the header truncates it to sgx_enclave_..._permissions(9) because even manpage titles have a character limit, iconic honestly.

🎀 NAME 🎀

sgx_enclave_restrict_permissions — literally just restrict EPCM permissions. That's the whole vibe. Nothing more, nothing less. 🔒

🌸 SYNOPSIS 🌸

long sgx_enclave_restrict_permissions (struct sgx_encl *encl , struct
sgx_enclave_restrict_permissions *modp );

Two args, one long return. Clean, simple, no cap. ✨

🦋 ARGUMENTS 🦋

  • encl — the enclave the pages belong to. Like, which enclave are we even doing this to, bestie? This one. 🏠
  • modp — the checked parameters that came from user space, telling you which pages need modifying and what their new permissions should be. Basically the to-do list, already sanity-checked. 📋

💖 RETURN 💖

  • 0 — success! slay, it worked, we ate. 🎉
  • -errno — otherwise. iykyk. 😭

👑 SEE ALSO 👑

Kernel file ./arch/x86/kernel/cpu/sgx/ioctl.c — go read the source, it's giving main character energy. Also go check out the whole friend group:

The whole squad, fr fr. 🫶

ngl if you're messing with enclave permissions you better actually know what you're doing — this is kernel-tier stuff, not a vibe check. 🙈

and that's the page!! 🌈 sign-off time: this cutie lives in ./arch/x86/kernel/cpu/sgx, dropped October 2026, and yes the manual page name is still the un-abbreviated sgx_enclave_..._permissions(9) because we commit to the bit. 💜🦋🌸 bye bestie, go restrict some perms responsibly 💅✨

📦 where this page comes from