From owner-freebsd-security@FreeBSD.ORG  Tue Sep 11 21:45:44 2012
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id E2689106564A;
	Tue, 11 Sep 2012 21:45:44 +0000 (UTC)
	(envelope-from delphij@delphij.net)
Received: from anubis.delphij.net (anubis.delphij.net [64.62.153.212])
	by mx1.freebsd.org (Postfix) with ESMTP id BB09F8FC16;
	Tue, 11 Sep 2012 21:45:44 +0000 (UTC)
Received: from epsilon.delphij.net (drawbridge.ixsystems.com [206.40.55.65])
	(using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by anubis.delphij.net (Postfix) with ESMTPSA id 5BE7B1EE93;
	Tue, 11 Sep 2012 14:45:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=delphij.net; s=anubis;
	t=1347399944; bh=5QLVii0HgWL+1P3t4rKcTsrFnJdKl/5P9D9ThzCBK0c=;
	h=Date:From:Reply-To:To:CC:Subject:References:In-Reply-To;
	b=zzeuhqx3R96odI1Q7z4PH7d4cOc/KaOQ2e8xziCbzQPHk0R9NFUzFhEnItVVUaWoX
	0CRwSN/s7cnFft3RUQQcTK4T20Fp24v5DI/qyKeUZm2I6AS8+KD+DuluJnnZZNA1ff
	0KNelakshHcKs+2x5B0f+NPgCr/RbWDBpLWGgF+0=
Message-ID: <504FB108.1030302@delphij.net>
Date: Tue, 11 Sep 2012 14:45:44 -0700
From: Xin Li <delphij@delphij.net>
Organization: The freeBSD Project
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
	rv:10.0.7) Gecko/20120830 Thunderbird/10.0.7
MIME-Version: 1.0
To: d@delphij.net
References: <20120906174247.GB13179@dragon.NUXI.org>
	<20120906230157.5307a21f@gumby.homeunix.com>
	<20120906224703.GD89120@x96.org> <50493480.8060307@FreeBSD.org>
	<20120911061530.GA77399@dragon.NUXI.org>
	<504EDC67.9070700@FreeBSD.org> <86sjao7q8c.fsf@ds4.des.no>
	<20120911205302.27484fd6@gumby.homeunix.com>
	<20120911200925.GA88456@dragon.NUXI.org>
	<504FA76A.5000209@delphij.net>
	<20120911211730.GB89188@dragon.NUXI.org>
	<504FAB87.3020701@delphij.net>
In-Reply-To: <504FAB87.3020701@delphij.net>
X-Enigmail-Version: 1.4.3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Cc: Arthur Mesh <arthurmesh@gmail.com>, Doug Barton <dougb@FreeBSD.org>,
	freebsd-rc@freebsd.org, freebsd-security@freebsd.org,
	RW <rwmaillists@googlemail.com>,
	=?UTF-8?B?RGFnLUVybGluZyDvv70=?= <des@des.no>
Subject: Re: svn commit: r239569 - head/etc/rc.d
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: d@delphij.net
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Sep 2012 21:45:45 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

By the way what I meant would be something like:

Instead of:

| /sbin/sha256 -q | dd of=/dev/random bs=8k 2>/dev/null

Do:

| gzip | dd ibs=1 iseek=16 obs=8k count=8k of=/dev/random 2>/dev/null

Note that the first few bytes are deterministic (header, etc) so I
choose to skip first 16 bytes.

Cheers,
- -- 
Xin LI <delphij@delphij.net>    https://www.delphij.net/
FreeBSD - The Power to Serve!           Live free or die
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBCAAGBQJQT7EHAAoJEG80Jeu8UPuzwVAH/iJ0EqAJhunpAJSn3P+X3fM5
wOphiC/eQ6A8sJjoUkL3CfB3DlAWJGFThTe/N8u1rp/gHnbrRMGTcs4g6WzYeD5K
atsGpPzM3h0b5PrrMJ3tY9u9KBlRztehayUjfQZKrPOwmJe2DxzZATaa+A617PGz
88g7+40HcWgUhYqv0TlgiNjxlMKUNxZfDZExYzg2NnYDCSnRLGrN//xlrS3cO2Im
HlB2gXeVFBfF/fwDxEAsOSw5yCOSQIyrqUX8o3Cdlqm5MHj1eU/NLsjqVoJ2y/v4
5CtLErrKKmVjow4ycEWdtkhIPaE9Fj1InwhfWBGOYKThwDnCGaG/Apz1zYQ0SIA=
=GIbg
-----END PGP SIGNATURE-----