On Fri, Jul 24, 2020 at 06:03:36PM +0200, Joerg Roedel wrote: > From: Martin Radev <martin.b.radev@xxxxxxxxx> > > Make sure the machine supports RDRAND, otherwise there is no trusted > source of of randomness in the system. > > To also check this in the pre-decompression stage, make has_cpuflag > not depend on CONFIG_RANDOMIZE_BASE anymore. > > Signed-off-by: Martin Radev <martin.b.radev@xxxxxxxxx> Reviewed-by: Kees Cook <keescook@xxxxxxxxxxxx> -- Kees Cook