seeding dev/random in 5.5

R. B. Riddick arne_woerner at yahoo.com
Tue Aug 8 13:53:49 UTC 2006



--- Michael Scheidell <scheidell at secnap.net> wrote:

> R. B. Riddick wrote:
> > --- Michael Scheidell <scheidell at secnap.net> wrote:
> >   
> >>> I think that during the first reboot after a fresh install 
> >>> the kern.random.sys sysctl settings are already orderly 
> >>> before rc.d/sshd is called...
> >>>
> >>> If yes, then sending some pings should do the trick... Or 
> >>> not? I mean: NETWORKING should already be provided at that point...
> >>>       
> >> I am not sure I understand what you are saying in the context of my
> >> question.
> >>
> >>     
> > I mean:
> > Instead of changing a rc.d script u or ur friend could just send some pings
> to
> > the deeply buried box...
> >
> >   
> why would that help?
> 
> if (without changing rc file) /dev/random isn't seeded by networking,
> why wold a ping help?
>
I was under the impression, that
  kern.random.sys.harvest.ethernet
is
  1
by default.

That would mean, that ethernet traffic to that deeply buried box should feed
that /dev/random until it is fat and round...

Why do u believe, that /dev/random isnt seeded by networking?

-Arne

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


More information about the freebsd-security mailing list