* Re: random: treat bootloader trust toggle the same way as cpu trust toggle
@ 2022-03-25 11:45 Sedat Dilek
2022-03-25 14:46 ` Jason A. Donenfeld
0 siblings, 1 reply; 2+ messages in thread
From: Sedat Dilek @ 2022-03-25 11:45 UTC (permalink / raw)
To: Jason A. Donenfeld
Cc: Theodore Ts'o, Graham Christensen, Ard Biesheuvel,
Dominik Brodowski, linux-crypto, linux-kernel
[ Unsure which ML to CC - see [1] - so I used what was CCed in [3]]
Hi,
I am not a security expert but following the exciting changes to
random/crng changes in upcoming v5.18 and using it on top of Linux
v5.17.
Just saw this typo in [0]:
diff --git a/Documentation/admin-guide/kernel-parameters.txt
b/Documentation/admin-guide/kernel-parameters.txt
index c658e5d2d52c9..b9d764a492078 100644
--- a/Documentation/admin-guide/kernel-parameters.txt
+++ b/Documentation/admin-guide/kernel-parameters.txt
@@ -4400,6 +4400,12 @@
fully seed the kernel's CRNG. Default is controlled
by CONFIG_RANDOM_TRUST_CPU.
+ random.trust_bootloader={on,off}
+ [KNL] Enable or disable trusting the use of the
+ a seed passed by the bootloader (if available) to
What do you want to say: "the" or "a" seed :-)?
+ fully seed the kernel's CRNG. Default is controlled
+ by CONFIG_RANDOM_TRUST_BOOTLOADER.
+
randomize_kstack_offset=
[KNL] Enable or disable kernel stack offset
randomization, which provides roughly 5 bits of
Thanks for your work!
Regards,
- Sedat -
[0] https://git.kernel.org/pub/scm/linux/kernel/git/crng/random.git/commit/?id=3032aedb16c77747f6a97d216887daec2b44f273
[1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/MAINTAINERS#n16315
[2] https://www.zx2c4.com/projects/linux-rng-5.17-5.18/
[3] https://marc.info/?t=164797651800005&r=1&w=2
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: random: treat bootloader trust toggle the same way as cpu trust toggle
2022-03-25 11:45 random: treat bootloader trust toggle the same way as cpu trust toggle Sedat Dilek
@ 2022-03-25 14:46 ` Jason A. Donenfeld
0 siblings, 0 replies; 2+ messages in thread
From: Jason A. Donenfeld @ 2022-03-25 14:46 UTC (permalink / raw)
To: sedat.dilek
Cc: Theodore Ts'o, Graham Christensen, Ard Biesheuvel,
Dominik Brodowski, Linux Crypto Mailing List, LKML
Hi Sedat,
On Fri, Mar 25, 2022 at 5:46 AM Sedat Dilek <sedat.dilek@gmail.com> wrote:
> I am not a security expert but following the exciting changes to
> random/crng changes in upcoming v5.18 and using it on top of Linux
> v5.17.
>
> Just saw this typo in [0]:
Thanks. Will fix a the bug.
Jason
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2022-03-25 14:47 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-03-25 11:45 random: treat bootloader trust toggle the same way as cpu trust toggle Sedat Dilek
2022-03-25 14:46 ` Jason A. Donenfeld
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).