| Date | Fri, 24 Jul 2020 10:55:52 -0700 | From | Kees Cook <> | Subject | Re: [PATCH v5 75/75] x86/sev-es: Check required CPU features for SEV-ES |
| |
On Fri, Jul 24, 2020 at 06:03:36PM +0200, Joerg Roedel wrote: > From: Martin Radev <martin.b.radev@gmail.com> > > Make sure the machine supports RDRAND, otherwise there is no trusted > source of of randomness in the system. > > To also check this in the pre-decompression stage, make has_cpuflag > not depend on CONFIG_RANDOMIZE_BASE anymore. > > Signed-off-by: Martin Radev <martin.b.radev@gmail.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
-- Kees Cook
|