From owner-freebsd-current@freebsd.org Mon Jan 23 18:52:26 2017 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6EB75CBE768 for ; Mon, 23 Jan 2017 18:52:26 +0000 (UTC) (envelope-from sjg@juniper.net) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0102.outbound.protection.outlook.com [104.47.38.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "Microsoft IT SSL SHA2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E33E113D3; Mon, 23 Jan 2017 18:52:25 +0000 (UTC) (envelope-from sjg@juniper.net) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=xpTDS35RLwJgb5lQU6QcANEz485gZojwxT5qqZ9lcuI=; b=coNWHn5DZIuOAY0xaYraM4A8l8Kx8BBBjUX2tNBO0ThpnoX34irQNRFDf7RDDhPlTTfG4Ibfysuh3iWjjRes+wjBhp5m+1LFKpsKFk+GLqFxx4TkzxZrdIsnmqxwunFoFY9izJLNnL/XQdjWf/dAd0zhufkpgXAsYw3QXaDAvwM= Received: from DM5PR05CA0008.namprd05.prod.outlook.com (10.173.226.18) by DM2PR0501MB1295.namprd05.prod.outlook.com (10.160.130.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.860.6; Mon, 23 Jan 2017 18:52:23 +0000 Received: from BL2FFO11FD029.protection.gbl (2a01:111:f400:7c09::103) by DM5PR05CA0008.outlook.office365.com (2603:10b6:3:d4::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.874.6 via Frontend Transport; Mon, 23 Jan 2017 18:52:23 +0000 Authentication-Results: spf=softfail (sender IP is 66.129.239.18) smtp.mailfrom=juniper.net; freebsd.org; dkim=none (message not signed) header.d=none;freebsd.org; dmarc=none action=none header.from=juniper.net; Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.18 as permitted sender) Received: from p-emfe01a-sac.jnpr.net (66.129.239.18) by BL2FFO11FD029.mail.protection.outlook.com (10.173.160.69) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.803.8 via Frontend Transport; Mon, 23 Jan 2017 18:52:22 +0000 Received: from p-mailhub01.juniper.net (10.160.2.17) by p-emfe01a-sac.jnpr.net (172.24.192.21) with Microsoft SMTP Server (TLS) id 14.3.123.3; Mon, 23 Jan 2017 10:52:21 -0800 Received: from kaos.jnpr.net (kaos.jnpr.net [172.21.30.60]) by p-mailhub01.juniper.net (8.14.4/8.11.3) with ESMTP id v0NIqL0m022272; Mon, 23 Jan 2017 10:52:21 -0800 (envelope-from sjg@juniper.net) Received: from kaos.jnpr.net (localhost [127.0.0.1]) by kaos.jnpr.net (Postfix) with ESMTP id 205F438555C; Mon, 23 Jan 2017 10:52:21 -0800 (PST) To: Jilles Tjoelker CC: Lu Tung-Pin , , , Subject: Re: Fix /etc/rc.d/random umask handling (/entropy permissions) In-Reply-To: <20170121220136.GA59654@stack.nl> References: <14f5a2fdf191c33e4ed1dc882b288e81@openmailbox.org> <20170121220136.GA59654@stack.nl> Comments: In-reply-to: Jilles Tjoelker message dated "Sat, 21 Jan 2017 23:01:36 +0100." From: "Simon J. Gerraty" X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <43885.1485197541.1@kaos.jnpr.net> Date: Mon, 23 Jan 2017 10:52:21 -0800 Message-ID: <43886.1485197541@kaos.jnpr.net> X-EOPAttributedMessage: 0 X-MS-Office365-Filtering-HT: Tenant X-Forefront-Antispam-Report: CIP:66.129.239.18; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(7916002)(39850400002)(39410400002)(39450400003)(39860400002)(39840400002)(2980300002)(199003)(189002)(24454002)(97736004)(55016002)(8936002)(50466002)(92566002)(626004)(7696004)(7126002)(305945005)(356003)(110136003)(5660300001)(68736007)(46406003)(69596002)(50226002)(54906002)(189998001)(97756001)(50986999)(76176999)(107886002)(229853002)(117636001)(53416004)(105596002)(2950100002)(38730400001)(106466001)(6916009)(47776003)(53936002)(9686003)(76506005)(2810700001)(2906002)(4326007)(81166006)(86362001)(8676002)(23726003)(4001430100002)(81156014)(77096006)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0501MB1295; H:p-emfe01a-sac.jnpr.net; FPR:; SPF:SoftFail; PTR:InfoDomainNonexistent; A:1; MX:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; BL2FFO11FD029; 1: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 X-MS-Office365-Filtering-Correlation-Id: b63b1d88-5f22-4ff0-491a-08d443c0f7a1 X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001); SRVR:DM2PR0501MB1295; X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1295; 3:OjukZj7OeBVXr38CWEA0+K/TKRm4bxbf+veUlvH0ySH5rKdkhkb5RGFrH1CTMGMSRYgaoFY+gW8eUjm7YzSMQbhBams+1ZOBqXlE+LHi0gPpu491RNk2bU3ZKfSMIoZpapcbB/D/5TiO6tOrG5LHRXAbBsbPGPid1bSM64YIHsioTD4hYwKTmBmPKSjqHGoXWUI1KUkz24uWVIJV7jidoRj1b1zYgXAAjOHOyQZowP0NkaOhXMLmi6fwOl2pRns5e0CdgAu+baDy4mksYh0l7tiRpqHWRDeslBafq2OF4lzqaSoSEcfHqTHG8JNmbN1d96QLWGFGZIXsTBxx1rXG7qvKxVF7VKlOCkhkRbXSuJR0F7pF6fywV7RBExAnJ6Vp X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1295; 25: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 X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1295; 31:F3dcqOvvzsc3XEs6LVfbxw2CsRqmmZJTmxS5B4yOQUcWzBuWyU23ZmQ18CDyGgQ9KQviaMohUc3Qh2fHu9A8qrSrBEGCkfJBv2FG3NX9LTN1gEE9iY8v87Fka8Wk+GVITQkoNlmneKPH0N89oFF6v/A5fjNjXtelXWAzpORo/zsq73pJhAXD5K3vLL7TbB114aP8IIoZhfFi78DR00YYnnCdBtUDlRpH2wvA97gWZdXcJsSvK9tVypxSIs+DyR4uKewgcryjSUqfT86VDn8Dow==; 20:G1MouIgajY/eRjrSv9W2/KHehxJfFCZhT8Yx1ONZxRVwBp2pXxM0eye/SMsSHGFXCKtBuAM/VHG8apRSi4VB3dVgS5Dia5ViG9dUR0e4Be+9K9x9vu1qAm63JpxbTm2w+ebnlXAVMFUIJ/OCTev611covmq1qhV4afyZ1aGUYp4g7SZ4bH8de7n+ISH2UxC5+GV0q739+Sj29BUWwIhBIoOc8F+fkU+QFxHXSO5n/wuil7ibCyraHeuA+YtNgECksSBUNQhIQRDm/+ANoGxnt02j6gv+WFR1xFrzFFvsWVvWoi0VX3yW8UlAbfxO45bTTcCJQo80DbQfgG6L+1fR6AfBQ7gmWyZcD2/tINg7O1/lOGxwp7cNZklxU9irFXSE/l4g7bgJdWYrF51Tm+famLgOyjX+x1EJc+FOvueb56TiTDdZtbjNRvNaX2hIkHCmYGjIUn9CPG6/N57zOOJXOqgrzn0Rm345QXohIctJERufYq2OyW/6KCgU4KqBudde X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040375)(601004)(2401047)(13015025)(13017025)(13023025)(13024025)(13018025)(8121501046)(5005006)(10201501046)(3002001)(6055026)(6041248)(20161123560025)(20161123558021)(20161123555025)(20161123562025)(20161123564025)(6072148); SRVR:DM2PR0501MB1295; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0501MB1295; X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1295; 4: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 X-Forefront-PRVS: 0196A226D1 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; DM2PR0501MB1295; 23:M+tmU02ayqR/6tp/tP8HHIx/Qjl1wlvPHfFRx8C?= =?us-ascii?Q?s83vMhEfDBCR9xOxjXXkj75blYZPi/4Nu3B2GPbLajWPNhee3lZhyptDOfzJ?= =?us-ascii?Q?JMpx5EjH81+mJcpXNBuNLYJZqAt7rSqeBbdO3fCtyOvYF3Dr/aCzHAGp1OVw?= =?us-ascii?Q?k1hSZFdtyJnvu6WzirPfb+L5YZK1DC/KX4BBgTaeD+hThW56BCU8h/WAsXUW?= =?us-ascii?Q?YyRQf09HhtR0NJxcChgtx65+gA6B4ONdegat4+DUCe8AhG83xHuerUY1wYzz?= =?us-ascii?Q?hxKKIhGxzkJX2Ncbyxa25Y7cXYsgy0eE3/I9/8VGQtrD7BFAosuTpadu+B96?= =?us-ascii?Q?jWLMBtRT+hJef/JgneRlqhdFnrRIfvpP1mDyIUCIr2vJPs3HWPQW10V6HG5C?= =?us-ascii?Q?S/LxEOK3O7P8PtBbhhJycp7/do99uae71xZET1cmZsDXYK6kQwMfYJ3c8X7P?= =?us-ascii?Q?sYCq7kthXGR2fyui8Hku0gciFp1f3AtK8sY39nFCDCzWGmopPVOehUlZ8Ltc?= =?us-ascii?Q?yl8SxhvNvFuTrRlBJsrinvvwc3G/P91+rsQuSrhVbhwE1jyf0pFgSw1Bopxl?= =?us-ascii?Q?etTNIpnuV2AANGitIQ2xV+h5PfkJv2+3RUg7L7setw7/coDENTGKHLQcVLBv?= =?us-ascii?Q?idN4dPk140Xi+EO3NJeOZFvLBloomJB6HV40GeCaxkFKaQaNPVwCYmdwQ2Zp?= =?us-ascii?Q?nfn2unbwY8tEDAMLyhN5WddgP91xtuHnmJfT3RlA50jvoi+rtgbVwmZvdlco?= =?us-ascii?Q?J9F6wM5eEeNeoZiDMmBfICOiVnNdQO7PAwpD4OoSQ0HM7pGT0N/H/qY58lC2?= =?us-ascii?Q?RwcpvVjBwGP6E8EHDH8ZGbZwt24GilejY5nrBaF/zQ5vI2xifhsKzfIIJ0p+?= =?us-ascii?Q?Kt3Ry2q04rSQJ50RW0ipSqWdUe7eaOHc14LntGxTGqsEpphFzz5goGFtFp3e?= =?us-ascii?Q?KXz+R/8Ug1MwtBFyneFFyjyBpvTILMiWS722papUW9q5JgGlb7CXL1oGTm1V?= =?us-ascii?Q?/BTmDXJS++V4Irk9PlVPdJAvEbVkH9MsbFYG9J5LcvXtJtFB2lobSlzYO41y?= =?us-ascii?Q?ZCVla8XEOcEVVKGNuoXxzlisN5xkZrffWWZDLEvQtBy+9E4fmx2QMgK34LNo?= =?us-ascii?Q?jKM9f8C2Mxz905SPG3c4FBzfYog9d+tf6TmyQW5LzX/j83DtnXG7oS5qpiJh?= =?us-ascii?Q?yP7rRSWVsjS5Kbo6zpLLoIpnxTB3V0qoEckSefQaOqa0Vkw1YGf/bCvNlmA1?= =?us-ascii?Q?hllNgJwz7FFIIz+WPmN1+ImsaTUIFsT5GzoTpRa7fGRHwikgzqp96z1MOqor?= =?us-ascii?Q?s7MI0zlEgplym5JswxxXkOsAvs6P0879eVtwAFwn/mdPb5DkPebEnXqpIXja?= =?us-ascii?Q?azMOEcQ=3D=3D?= X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1295; 6:0xATSSCcmza06/quuEpif7pgbH6+PYZ5Xhi8ghxN5d8RRXDYBJ0WT5DTz/UKvkkQ0DJPBVrIdvgkkQptlJjLpXBwGyRenWWdqDBt2+kANmVlkZKvhNcEIHrSzo/Xt3597EQsVsnu998zS0AwY6+rG6FhoUokl8Fxi2ArtA2YClY0mdu44ZOEXQKt/kwY6CcmmmTT0f6KkRbKdZomll/i59MIOhZpGRIKQy78bgz1iuNYq+qnCKv1kaD1iN2rZfTcG5Zg1MysgEB8/F5j2163u5hjTxSVMF1U9uPJEAI4HkF95oC0S0tABlNhyVrbwcHuMVhk09jezwLH2ptfAMOulTdkoJZZNviZius1o+xlgZE757/vz9YvcDsUMOalc0SYDhWeZ4kzjMUTkYhLs/jgObQeYYM5DudjQr9i5VDre3p5SjgboG8bulO3iZ/8Z3wR6pufXy6/aQoVsr6+QJpO8g==; 5:4ZHf8P71sZCVVqT26tj1WlOOoq3r25/idn2P4unaLO/iYqYXK7Cpkou1QuwSj0a1CiCCQbyJGRmJ+MoLQXE60i2ZUZu7VJhlUbauyUX/NP7o9XPnWB6RZYwFam8DTqbOJhudhpHh/EJP9bEyHk3z2Q==; 24:7dvBFO/8I4eiyVP6R11QJKDKro0eG/H4YFgGCKM88FrGQ/rnGBR9nCl9Vrlr+DWU67k9xV0a9UUVYSgdB5Kx0sVRmZqN/L3cOgkkf3boccg= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1295; 7:mXNWqCl748UI+Roo3LVqBSP57Xzq92JBE0Zn14FhG9g2++CNcgqzVENaqGx0UicDIv120scgZ3CbtnHS+zzUWrhQIOJtpf5+8mO8fY7glMv59kCb7FNo87qnQcCx/E3kGpUUMeUxGnyVo0FawHyueOiTRX/2OjkIJBjAqkz9j/6AiR93fD1OX8Rc/38pRmF9pPh4vk1Yy+lLoIphWznrKq22ca7L2fhItH+sq3MX5hhf/Gi9AvA3szrJ1aMPeDZ7wbogov2q59nMxCafWWIJOn2aeh/sam3dNmg0x1DiGLyxU3qsNEpImrdMLPRwUQPuS55O455zWwsvraF802TL0LOXu7LyKWIuAcSp+1gCoOz3ytGphzmKnBTpw6PFxE9mv3pnElWZM3HO5kmFQRtD9km2wp7NxmE7drUZlYPkgg0gMH2cmwEc9wtT6RPp+jKgteO8Is8b+jAha/GhHykFLg== X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Jan 2017 18:52:22.9818 (UTC) X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.239.18]; Helo=[p-emfe01a-sac.jnpr.net] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0501MB1295 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Jan 2017 18:52:26 -0000 Jilles Tjoelker wrote: > Index: etc/rc.d/random > =================================================================== > --- etc/rc.d/random (revision 311446) > +++ etc/rc.d/random (working copy) > @@ -20,12 +20,14 @@ > > save_dev_random() > { > + oumask=`umask` why not simply use a sub-shell to tighten umask (umask 077; what-ever)