Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 19 Aug 2004 11:19:10 +0200
From:      des@des.no (=?iso-8859-1?q?Dag-Erling_Sm=F8rgrav?=)
To:        Mark Murray <markm@FreeBSD.org>
Cc:        cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/etc/rc.d sshd
Message-ID:  <xzpekm3xz75.fsf@dwp.des.no>
In-Reply-To: <200408040810.i748AbmM013828@repoman.freebsd.org> (Mark Murray's message of "Wed, 4 Aug 2004 08:10:37 %2B0000 (UTC)")
References:  <200408040810.i748AbmM013828@repoman.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Mark Murray <markm@FreeBSD.org> writes:
>   Log:
>   Give sshd a secure startup, but with a tweakable timeout so that
>   the box won't hang forever at startup.

This is just wrong.  The test in user_reseed() always evaluates to
true, regardless of the value of kern.random.sys.seeded, because that
value is either "0" or "1" but never "".  This is *really* annoying
when you try to start a jail that has sshd enabled but doesn't have
keys yet.

Also, user_reseed() should be a separate script so that other scripts
that need entropy can depend on it instead of duplicating it.

DES
--=20
Dag-Erling Sm=F8rgrav - des@des.no



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpekm3xz75.fsf>