Collecting entropy from device_attach() times.
David O'Brien
obrien at FreeBSD.org
Thu Sep 20 23:29:48 UTC 2012
On Thu, Sep 20, 2012 at 11:32:53AM +0100, Jonathan Anderson wrote:
> As I believe theraven@ pointed out a couple of days ago: it is very
> silly indeed that we are taking data generated by the kernel (process
...
I thought I had mentioned something like this in the rc.d thread,
but it seems it was to an internal $WORK thread.
It would seem to me that adding a 'initialize_devrandom_seeding' sysctl
for use in 'initrandom' or the single-user user could be better than
running userland commands (sysctl, dmesg, kenv) or being restricted to
commands in /[s]bin where there are some interesting ones in /usr/bin
that aren't available to 'initrandom'.
This would allow us to specify >0 bits entropy from this data.
--
-- David (obrien at FreeBSD.org)
More information about the freebsd-security
mailing list