kern.randompid: jot generation senseful?

[Erik Trulsson]

On Tue, May 09, 2006 at 02:20:25PM +0200, No at SPAM@mgEDV.net wrote:
> [asked on -security before, but no answer, maybe here's more traffic ;-)]
> 
> hi,
> 
> is a random pid generation really a security enhancement?

Yes, but a fairly minor one.

> 
> if yes, would it make sense to setup something like:
> --> sysctl kern.randompid=`jot -r 1 500 2000`
> in cron to be executed every X mins/hrs?

No, that would not make any sense.  What would you be expecting
to achieve by that?

> 
> and finally, what are the recommended minimum (security)
> and maximum (performance) values for kern.randompid?





-- 
<Insert your favourite quote here.>
Erik Trulsson
ertr1013 at student.uu.se