Re: [PATCH v5 75/75] x86/sev-es: Check required CPU features for SEV-ES

Kees Cook
2020-07-24T17:55:56Z

On Fri, Jul 24, 2020 at 06:03:36PM +0200, Joerg Roedel wrote:
> From: Martin Radev <martin.b.radev@gmail.com>
>
> Make sure the machine supports RDRAND, otherwise there is no trusted
> source of of randomness in the system.
>
> To also check this in the pre-decompression stage, make has_cpuflag
> not depend on CONFIG_RANDOMIZE_BASE anymore.
>
> Signed-off-by: Martin Radev <martin.b.radev@gmail.com>

Reviewed-by: Kees Cook <keescook@chromium.org>

--
Kees Cook