diff -Nru linux-base-4.5ubuntu1/debian/changelog linux-base-4.5ubuntu2/debian/changelog
--- linux-base-4.5ubuntu1/debian/changelog	2017-04-28 01:16:31.000000000 -0300
+++ linux-base-4.5ubuntu2/debian/changelog	2020-03-17 16:17:43.000000000 -0300
@@ -1,3 +1,9 @@
+linux-base (4.5ubuntu2) bionic; urgency=medium
+
+  * Add linux-base-sgx package with SGX udev rules (LP: #1867820).
+
+ -- Marcelo Henrique Cerri <marcelo.cerri@canonical.com>  Tue, 17 Mar 2020 16:17:43 -0300
+
 linux-base (4.5ubuntu1) artful; urgency=low
 
   * Merge from Debian unstable.  Remaining changes:
diff -Nru linux-base-4.5ubuntu1/debian/control linux-base-4.5ubuntu2/debian/control
--- linux-base-4.5ubuntu1/debian/control	2016-09-17 03:12:36.000000000 -0300
+++ linux-base-4.5ubuntu2/debian/control	2020-03-17 16:17:43.000000000 -0300
@@ -15,3 +15,11 @@
 Description: Linux image base package
  This package contains files and support scripts for all Linux
  images.
+
+Package: linux-base-sgx
+Architecture: all
+Depends: ${misc:Depends}
+Multi-Arch: foreign
+Description: Linux image base package for DCAP SGX
+ This package contains files and support scripts for all Linux
+ images with DCAP SGX drivers.
diff -Nru linux-base-4.5ubuntu1/debian/linux-base-sgx.postinst linux-base-4.5ubuntu2/debian/linux-base-sgx.postinst
--- linux-base-4.5ubuntu1/debian/linux-base-sgx.postinst	1969-12-31 21:00:00.000000000 -0300
+++ linux-base-4.5ubuntu2/debian/linux-base-sgx.postinst	2020-03-17 16:17:43.000000000 -0300
@@ -0,0 +1,30 @@
+#!/bin/sh
+# postinst script for linux-base-sgx
+
+set -e
+
+# summary of how this script can be called:
+#        * <postinst> `configure' <most-recently-configured-version>
+#        * <old-postinst> `abort-upgrade' <new version>
+#        * <conflictor's-postinst> `abort-remove' `in-favour' <package>
+#          <new-version>
+#        * <deconfigured's-postinst> `abort-deconfigure' `in-favour'
+#          <failed-install-package> <version> `removing'
+#          <conflicting-package> <version>
+# for details, see http://www.debian.org/doc/debian-policy/ or
+# the debian-policy package
+
+case "$1" in
+  configure)
+    # Add the sgx_prv group unless it's already there
+    addgroup --quiet --system sgx_prv || true
+    ;;
+  abort-upgrade|abort-remove|abort-deconfigure)
+    ;;
+  *)
+    echo "postinst called with unknown argument \`$1'" >&2
+    exit 1
+  ;;
+esac
+
+#DEBHELPER#
diff -Nru linux-base-4.5ubuntu1/debian/linux-base-sgx.udev linux-base-4.5ubuntu2/debian/linux-base-sgx.udev
--- linux-base-4.5ubuntu1/debian/linux-base-sgx.udev	1969-12-31 21:00:00.000000000 -0300
+++ linux-base-4.5ubuntu2/debian/linux-base-sgx.udev	2020-03-17 16:17:43.000000000 -0300
@@ -0,0 +1,2 @@
+SUBSYSTEM=="sgx",KERNEL=="sgx",RUN+="/bin/chmod 666 /dev/$name"
+SUBSYSTEM=="sgx",KERNEL=="sgx_prv",GROUP="sgx_prv",RUN+="/bin/chmod 660 /dev/$name"