Regarding the issue of kernel version

[xiaoran33]

Yep, everything is well.
为啥你的是ok，奇怪，你的内核版本是5.4的哪个版本呢？cpu的型号和我这个型号是一致的吗？

If such problem still disturb you, suggest switch to Linux 5.10.
我看enable_rdfsbase的介绍，这个打开会增加漏洞风险，5.10默认就是打开的话，那5.10这个内核版本有这个风险吗？

[Bonjourz]

Hi @xiaoran33 , "enable_rdfsgsbase" is a kernel module for the kernel on which fsgsbase is not enabled by kernel. So it may incur security issues, as stated in here:

This kernel module is intended for evaluation only, NOT in production! Enabling rdfsbase-family instructions in the way shown in this kernel module creates a full unpriviledged root hole in the Linux kernel.

But for newer Linux which enables fsgsbase in default, the security issues is solved. So we recommend users to use Linux 5.10 for HyperEnclave.