Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Date:   Thu, 7 Feb 2019 12:28:09 +0100
From:   Greg KH <greg@kroah.com>
To:     Sasha Levin <sashal@kernel.org>
Cc:     "Rantala, Tommi T. (Nokia - FI/Espoo)" <tommi.t.rantala@nokia.com>,
        "stable@vger.kernel.org" <stable@vger.kernel.org>,
        "keescook@chromium.org" <keescook@chromium.org>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        "tytso@mit.edu" <tytso@mit.edu>
Subject: Re: 4.14 "random: add a config option to trust the CPU's hwrng"
Message-ID: <20190207112809.GC3120@kroah.com>
References: <b6532199f855e48fa53b8c3725a2eb93f949b32a.camel@nokia.com>
 <20190206192613.GB4119@sasha-vm>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20190206192613.GB4119@sasha-vm>
User-Agent: Mutt/1.11.3 (2019-02-01)
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk

On Wed, Feb 06, 2019 at 02:26:13PM -0500, Sasha Levin wrote:
> On Wed, Feb 06, 2019 at 11:44:36AM +0000, Rantala, Tommi T. (Nokia - FI/Espoo) wrote:
> > Hi stable maintainers,
> > 
> > Can you consider including these "random" patches in 4.14.y?
> > 
> > These are very useful in fixing esp. first-bootup delays of VMs due to
> > entropy starvation.
> > 
> > 
> > commit 39a8883a2b989d1d21bd8dd99f5557f0c5e89694
> > Author: Theodore Ts'o <tytso@mit.edu>
> > Date:   Tue Jul 17 18:24:27 2018 -0400
> > 
> >    random: add a config option to trust the CPU's hwrng
> > 
> > commit 9b25436662d5fb4c66eb527ead53cab15f596ee0
> > Author: Kees Cook <keescook@chromium.org>
> > Date:   Mon Aug 27 14:51:54 2018 -0700
> > 
> >    random: make CPU trust a boot parameter
> 
> This really looks like a new feature to me. The "old" behaviour of not
> trusting RDRAND-like randomness was by-design rather than an oversight.

I agree with Sasha, this looks like a new feature.  If you really want
this new functionality, just use 4.19 or newer, right?

thanks,

greg k-h