Re: [d-kernel] [PATCH un-def/sisyphus] config: Enable seeding CRNG from CPU and bootleader

["Vladimir D. Seleznev" <vseleznv@altlinux.org>]

On Mon, May 09, 2022 at 07:05:01PM +0300, Andrey Savchenko wrote:
> On Mon,  9 May 2022 17:23:00 +0300 Vitaly Chikunov wrote:
> > This can be disabled at boot time with:
> >   random.trust_cpu=off
> >   random.trust_bootloader=off
> > 
> > Signed-off-by: Vitaly Chikunov <vt@altlinux.org>
> > ---
> >  config | 4 ++--
> >  1 file changed, 2 insertions(+), 2 deletions(-)
> > 
> > diff --git a/config b/config
> > index e529911fd5dc..5b817e945274 100644
> > --- a/config
> > +++ b/config
> > @@ -4479,8 +4479,8 @@ CONFIG_XILLYBUS_CLASS=m
> >  CONFIG_XILLYBUS=m
> >  CONFIG_XILLYBUS_PCIE=m
> >  # CONFIG_XILLYUSB is not set
> > -# CONFIG_RANDOM_TRUST_CPU is not set
> > -# CONFIG_RANDOM_TRUST_BOOTLOADER is not set
> > +CONFIG_RANDOM_TRUST_CPU=y
> > +CONFIG_RANDOM_TRUST_BOOTLOADER=y
> 
> These sources are not trusted in most cases, so please avoid
> enabling them by default for everyone.

It's a very horrible world where you cannot trust to your CPU.

-- 
   WBR,
   Vladimir D. Seleznev