On Wed, Feb 06, 2019 at 11:44:36AM +0000, Rantala, Tommi T. (Nokia - FI/Espoo)
wrote:
Hi stable maintainers,
Can you consider including these "random" patches in 4.14.y?
These are very useful in fixing esp. first-bootup delays of VMs due to
entropy starvation.
commit 39a8883a2b989d1d21bd8dd99f5557f0c5e89694
Author: Theodore Ts'o <[email protected]>
Date: Tue Jul 17 18:24:27 2018 -0400
random: add a config option to trust the CPU's hwrng
commit 9b25436662d5fb4c66eb527ead53cab15f596ee0
Author: Kees Cook <[email protected]>
Date: Mon Aug 27 14:51:54 2018 -0700
random: make CPU trust a boot parameter
This really looks like a new feature to me. The "old" behaviour of not
trusting RDRAND-like randomness was by-design rather than an oversight.
--
Thanks,
Sasha