STRUCT SGX_ENCLAVE_RESTRICT_PERMISSIONS(9)

💅 NAME 💅

okay so bestie, this is struct sgx_enclave_restrict_permissions — literally the parameters struct for the ioctl %SGX_IOC_ENCLAVE_RESTRICT_PERMISSIONS 🎀 and yes we're doing this in the Kernel API Manual, you're welcome, iykyk ✨

🦋 SYNOPSIS 🦋

struct sgx_enclave_restrict_permissions {
    __u64 offset;
    __u64 length;
    __u64 permissions;
    __u64 result;
    __u64 count;
 };

no cap, that's the whole vibe of it 🫶

🌸 Members 🌸

• offset — the starting page offset babes, and it is page aligned relative to the enclave base address defined in SECS 💅 don't come at me with your unaligned nonsense, it's giving misaligned and we're not doing that 🙈
• length — how much memory we're talking about, and it has to be a multiple of the page size ✨ periodt.
• permissions — the new permission bits for the pages in the range described by offset and length 👑 this is the main character field, lowkey the whole reason the struct exists 🎀
• result — (output) the SGX result code of the ENCLS[EMODPR] function 🌈 that's the function name, character for character, put some respect on it 💜
• count — (output) bytes successfully changed, and yup, it's a multiple of page size 🧚 slay.

🍓 SEE ALSO 🍓

go look at these too bestie, they're all literally iconic ✨

• Kernel file ./arch/x86/include/uapi/asm/sgx.h
• enum sgx_page_flags(9)
• struct sgx_enclave_create(9)
• struct sgx_enclave_add_pages(9)
• struct sgx_enclave_init(9)
• struct sgx_enclave_provision(9)
• struct sgx_enclave_modify_types(9)
• struct sgx_enclave_remove_pages(9)
• sgx_enclave_user_handler_t(9)
• struct sgx_enclave_run(9)
• vdso_sgx_enter_enclave_t(9)

and that's the whole thing, no notes 💯 this page lives in ./arch/x86/include/uapi/asm, dated October 2026 — yeah ik, future vibes 🦋 go read it again if you zoned out, i believe in you 🫶💖