From owner-svn-src-all@FreeBSD.ORG Wed Apr 1 15:51:18 2015 Return-Path: Delivered-To: svn-src-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 327A7FE0; Wed, 1 Apr 2015 15:51:18 +0000 (UTC) Received: from gromit.grondar.org (grandfather.grondar.org [IPv6:2a01:348:0:15:5d59:5c20:0:2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id E5CEB89; Wed, 1 Apr 2015 15:51:17 +0000 (UTC) Received: from graveyard.grondar.org ([88.96.155.33] helo=gronkulator.grondar.org) by gromit.grondar.org with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.85 (FreeBSD)) (envelope-from ) id 1YdKvE-000Bpu-6i; Wed, 01 Apr 2015 16:51:16 +0100 Subject: Re: svn commit: r280955 - in head/sys: modules/notrandom dev/notrandom Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2096\)) Content-Type: text/plain; charset=utf-8 From: Mark R V Murray In-Reply-To: <20150401154633.GA14631@dft-labs.eu> Date: Wed, 1 Apr 2015 16:51:10 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <22C101FB-6F00-468C-8681-27EB54E4049A@grondar.org> References: <20150401113628.GA16649@dft-labs.eu> <20150401114313.GZ64665@FreeBSD.org> <20150401115204.GB16649@dft-labs.eu> <1427897897.82583.62.camel@freebsd.org> <551C0A92.8070507@freebsd.org> <551C0B2A.9060006@freebsd.org> <5A609CED-56E6-4459-8505-58930048AA0D@grondar.org> <20150401154633.GA14631@dft-labs.eu> To: Mateusz Guzik X-Mailer: Apple Mail (2.2096) X-SA-Score: -4.0 Cc: Benjamin Kaduk , "svn-src-head@freebsd.org" , "svn-src-all@freebsd.org" , "src-committers@freebsd.org" X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 15:51:18 -0000 > On 1 Apr 2015, at 16:46, Mateusz Guzik wrote: > We can add an ioctl to control this. Thats a bad idea, because some fool may set up their local instance to = return a random number (like 4), and that will badly break the intent of = this device. And before somebody says =E2=80=9Ctools, not policy=E2=80=9D, there is = SOME level of protection that you must allow for to prevent completely = idiotic admins to foul things up! > Opinions? =E2=80=9CPah!=E2=80=9D? M --=20 Mark R V Murray