On Fri, Feb 01, 2013 at 08:17:26PM -0500, Paul Wouters wrote: > The guests can always run their own rngd type tool? Yeah, this just makes host randomness available to the guest - it doesn't directly feed it to /dev/random. The guest still gets to define its own policy. -- Matthew Garrett | mjg59 at srcf.ucam.org