Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 7 Sep 2013 22:45:11 +0100
From:      Mark R V Murray <mark@grondar.org>
To:        Ian Lepore <ian@FreeBSD.org>
Cc:        Adrian Chadd <adrian@FreeBSD.org>, "freebsd-current@freebsd.org" <freebsd-current@FreeBSD.org>
Subject:   Re: random(4) update causes mips compile fail | mips boot fail
Message-ID:  <BCAEDD96-F0BD-445C-8E72-A05CFFF4D83C@grondar.org>
In-Reply-To: <1378589511.1111.529.camel@revolution.hippie.lan>
References:  <1378572186.1588.5.camel@localhost> <24DB010A-F374-491B-9203-FDDD7EA14A51@grondar.org> <1378579011.1588.16.camel@localhost> <9240BEF1-2791-4D58-A422-08AEF1CD306C@grondar.org> <1378586316.1111.524.camel@revolution.hippie.lan> <CAJ-Vmonk4rFrx1i3jWe_m2aoZCzMeM_a=PYFm0yjUYxSzJhd5w@mail.gmail.com> <618CA386-7444-4631-A69B-7FD2F22C91E6@grondar.org> <1378589511.1111.529.camel@revolution.hippie.lan>

next in thread | previous in thread | raw e-mail | index | archive | help

--Apple-Mail=_0DF2CB3D-CBBE-440F-99BD-85C8FD521DE8
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=us-ascii


On 7 Sep 2013, at 22:31, Ian Lepore <ian@FreeBSD.org> wrote:
> Those of us who have to cope with limited systems will fix our config
> for those systems; that part of it shouldn't be your problem beyond
> providing us with a knob.

If there is NO random number generator, then /dev/random blocks. Period.
If you don't want to block, don't read /dev/random.

If you have an RNG loaded (like Yarrow), the intent is that it will
block-until-secure, but you can insta-unblock it by writing to it.

The intent is that early in the boot, while running all the /etc/rc.d/*
stuff, you write anything you like (hopefully random crud) to the device
and it seeds itself with what it gets. At file close after the write,
it unblocks.

So at the minimum, you can unblock Yarrow by doing

$ echo '' > /dev/random

... as soon as the device is active. There is your knob.

M
-- 
Mark R V Murray


--Apple-Mail=_0DF2CB3D-CBBE-440F-99BD-85C8FD521DE8
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.20 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQCVAwUBUiueZ958vKOKE6LNAQpweAP/UGQnbVOT0Qh+4nrldKvK9dzsdbj0AAZm
wuBuITlTrrgioHWxrXlOAsp80Xa7CaOvTGLhNoVIP7qfW74klWTGJ7Jpej8aeVtC
fsOZq7D43bDqremOV4HSTu11oovhwtJx4QsD6s59nUiU0SoDgo30B+xYYFqRnRSz
pwVQJ7pHqfU=
=VHNS
-----END PGP SIGNATURE-----

--Apple-Mail=_0DF2CB3D-CBBE-440F-99BD-85C8FD521DE8--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?BCAEDD96-F0BD-445C-8E72-A05CFFF4D83C>