On Mon,  9 May 2022 17:23:00 +0300 Vitaly Chikunov wrote:
> This can be disabled at boot time with:
>   random.trust_cpu=off
>   random.trust_bootloader=off
> 
> Signed-off-by: Vitaly Chikunov <vt@altlinux.org>
> ---
>  config | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/config b/config
> index e529911fd5dc..5b817e945274 100644
> --- a/config
> +++ b/config
> @@ -4479,8 +4479,8 @@ CONFIG_XILLYBUS_CLASS=m
>  CONFIG_XILLYBUS=m
>  CONFIG_XILLYBUS_PCIE=m
>  # CONFIG_XILLYUSB is not set
> -# CONFIG_RANDOM_TRUST_CPU is not set
> -# CONFIG_RANDOM_TRUST_BOOTLOADER is not set
> +CONFIG_RANDOM_TRUST_CPU=y
> +CONFIG_RANDOM_TRUST_BOOTLOADER=y

These sources are not trusted in most cases, so please avoid
enabling them by default for everyone.

Best regards,
Andrew Savchenko