2 files changed, 17 insertions, 0 deletions
diff --git a/configure b/configure
index 430e57e..95b92f0 100755
--- a/configure
+++ b/configure
@@ -636,6 +636,7 @@ choose cl namespaces 'namespaces'
 choose cl nsgetparent 'NS_GET_PARENT'
 choose cl explicit_bzero 'explicit_bzero()'
 choose cl getrandom 'getrandom()'
+choose cl grndinsecure 'GRND_INSECURE'
 choose cl chroot 'chroot()'
 
 # Here are the evil irreducible run-time sysdeps.
diff --git a/src/sysdeps/trygrndinsecure.c b/src/sysdeps/trygrndinsecure.c
new file mode 100644
index 0000000..a856ee7
--- /dev/null
+++ b/src/sysdeps/trygrndinsecure.c
@@ -0,0 +1,16 @@
+/* ISC license. */
+
+#include <features.h>
+
+#ifdef __stub_getrandom
+#error getrandom() appears to be a stub function, we won't use it.
+#endif
+
+#include <sys/random.h>
+
+int main (void)
+{
+  char buf[4] ;
+  if (getrandom(buf, 4, GRND_INSECURE) < 0) return 1 ;
+  return 0 ;
+}