On Wed, Feb 06, 2019 at 11:44:36AM +0000, Rantala, Tommi T. (Nokia - FI/Espoo) wrote:
Hi stable maintainers,
Can you consider including these "random" patches in 4.14.y?
These are very useful in fixing esp. first-bootup delays of VMs due to entropy starvation.
commit 39a8883a2b989d1d21bd8dd99f5557f0c5e89694 Author: Theodore Ts'o tytso@mit.edu Date: Tue Jul 17 18:24:27 2018 -0400
random: add a config option to trust the CPU's hwrng
commit 9b25436662d5fb4c66eb527ead53cab15f596ee0 Author: Kees Cook keescook@chromium.org Date: Mon Aug 27 14:51:54 2018 -0700
random: make CPU trust a boot parameter
This really looks like a new feature to me. The "old" behaviour of not trusting RDRAND-like randomness was by-design rather than an oversight.
-- Thanks, Sasha