summary refs log tree commit diff
path: root/pkgs/os-specific/linux/kernel/common-config.nix
diff options
context:
space:
mode:
authorTim Steinbach <tim@nequissimus.com>2021-03-08 11:49:08 -0500
committerTim Steinbach <tim@nequissimus.com>2021-03-08 11:49:08 -0500
commitecce29eba2206e4fc8db91c61d5e6272583ece9e (patch)
treebd60b55bfc6bbfc1c5ea5efe7d390c5e98016b37 /pkgs/os-specific/linux/kernel/common-config.nix
parent7a44b04738dc4a10bb9009fc25b1a67587820304 (diff)
downloadnixpkgs-ecce29eba2206e4fc8db91c61d5e6272583ece9e.tar
nixpkgs-ecce29eba2206e4fc8db91c61d5e6272583ece9e.tar.gz
nixpkgs-ecce29eba2206e4fc8db91c61d5e6272583ece9e.tar.bz2
nixpkgs-ecce29eba2206e4fc8db91c61d5e6272583ece9e.tar.lz
nixpkgs-ecce29eba2206e4fc8db91c61d5e6272583ece9e.tar.xz
nixpkgs-ecce29eba2206e4fc8db91c61d5e6272583ece9e.tar.zst
nixpkgs-ecce29eba2206e4fc8db91c61d5e6272583ece9e.zip
kernel: RANDOM_TRUST_CPU for >= 4.19
Diffstat (limited to 'pkgs/os-specific/linux/kernel/common-config.nix')
-rw-r--r--pkgs/os-specific/linux/kernel/common-config.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/pkgs/os-specific/linux/kernel/common-config.nix b/pkgs/os-specific/linux/kernel/common-config.nix
index 4764f166684..b72809918b4 100644
--- a/pkgs/os-specific/linux/kernel/common-config.nix
+++ b/pkgs/os-specific/linux/kernel/common-config.nix
@@ -435,7 +435,7 @@ let
       SECURITY_APPARMOR                = yes;
       DEFAULT_SECURITY_APPARMOR        = yes;
 
-      RANDOM_TRUST_CPU                 = yes; # allow RDRAND to seed the RNG
+      RANDOM_TRUST_CPU                 = whenAtLeast "4.19" yes; # allow RDRAND to seed the RNG
 
       MODULE_SIG            = no; # r13y, generates a random key during build and bakes it in
       # Depends on MODULE_SIG and only really helps when you sign your modules