From owner-freebsd-security@FreeBSD.ORG  Mon Sep 17 00:23:46 2012
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id AFBF1106564A
	for <freebsd-security@freebsd.org>;
	Mon, 17 Sep 2012 00:23:46 +0000 (UTC)
	(envelope-from rwmaillists@googlemail.com)
Received: from mail-wg0-f50.google.com (mail-wg0-f50.google.com [74.125.82.50])
	by mx1.freebsd.org (Postfix) with ESMTP id 31A678FC15
	for <freebsd-security@freebsd.org>;
	Mon, 17 Sep 2012 00:23:45 +0000 (UTC)
Received: by wgi16 with SMTP id 16so348460wgi.31
	for <freebsd-security@freebsd.org>;
	Sun, 16 Sep 2012 17:23:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=googlemail.com; s=20120113;
	h=date:from:to:subject:message-id:in-reply-to:references:x-mailer
	:mime-version:content-type:content-transfer-encoding;
	bh=klTGJwH5CXGZAh2ZmbbZnIuNU7c8Rzw6Z1YLWknMpMg=;
	b=pnRtKt6UhocQGqukmUY8ni9tbMXd3k83n/uAwSgaKr361epN8LkiYO6TquRGFD0PCK
	zbkcxzUd+0ySEyUfSpdOgyyVoz52P9/Sjag36lsWUtpgG36nMB5OG+ENq4aeLWntZWHP
	VGVG2ag0zre9eqxFS+nyjRS68IfcT3evddzKmRV9juGgASdUY3GlB5hx/gselXSWTmKb
	+paoFE5ooIPbmh5CsHJWogX9ak47ccFw930No2S5stexeJG4c8xkuqM56TKNZvQiwYqc
	zNVLoI3KWOeZblsa/hL1QRZZ1UJShDD4nXDF3bh+fn3e9nYz7oxHmIFrAPVzty+PPIXY
	zWVw==
Received: by 10.216.167.135 with SMTP id i7mr4948411wel.97.1347841424715;
	Sun, 16 Sep 2012 17:23:44 -0700 (PDT)
Received: from gumby.homeunix.com (87-194-105-247.bethere.co.uk.
	[87.194.105.247])
	by mx.google.com with ESMTPS id fb20sm21459787wid.1.2012.09.16.17.23.42
	(version=SSLv3 cipher=OTHER); Sun, 16 Sep 2012 17:23:43 -0700 (PDT)
Date: Mon, 17 Sep 2012 01:23:41 +0100
From: RW <rwmaillists@googlemail.com>
To: freebsd-security@freebsd.org
Message-ID: <20120917012341.79cc8ce2@gumby.homeunix.com>
In-Reply-To: <50564446.80606@FreeBSD.org>
References: <50453686.9090100@FreeBSD.org>
	<alpine.BSF.2.00.1209131258210.13080@ai.fobar.qr>
	<alpine.BSF.2.00.1209141336170.13080@ai.fobar.qr>
	<E1TCXN0-000NFT-7I@groundzero.grondar.org>
	<CAG5KPzwOdCkybj3D5uic1KC-pwW-pewgsrqrXg60f5SJjtzYPw@mail.gmail.com>
	<E1TCbDG-0002Hz-9D@groundzero.grondar.org>
	<CAG5KPzzRxzVX-+9fYjRdqjY-wScbM6AA7GYtLmktgMG0Zg8iyQ@mail.gmail.com>
	<E1TCbSz-0007CJ-BI@groundzero.grondar.org>
	<CAG5KPzyJNmXRfxtPPrdc2zVCsxGtDfJT79YC3a1PNUfOOSzt8A@mail.gmail.com>
	<E1TCcIq-000Brr-Ex@groundzero.grondar.org>
	<CAG5KPzwEESg7iUb2+-kAN+k55M95BZjh5VaSvxzSsSCVuZ9kMw@mail.gmail.com>
	<E1TCdlD-000C1N-4g@groundzero.grondar.org>
	<CAG5KPzzFO1H5Wcx34oXi09=aJqg5w+XWSd8fnn0Byvpy_8+-rA@mail.gmail.com>
	<E1TCpk1-000N2H-Vq@groundzero.grondar.org>
	<CAG5KPzxOua1t+WCef77E5jA1j_m6 faw3JXUg sy8W_TeE+kpLUg@m
	<CAG5KPzymZY0ua2cAkzB-MK54G2WbWYi9J01c8YW4F9LOdVvc9A@mail.gmail.com>
	<E1TDHb0-000FIh-0Z@groundzero.grondar.org>
	<50564446.80606@FreeBSD.org>
X-Mailer: Claws Mail 3.8.1 (GTK+ 2.24.6; amd64-portbld-freebsd8.3)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Subject: Re: Proposed fix; stage 1 (Was: svn commit: r239569 - head/etc/rc.d)
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 17 Sep 2012 00:23:46 -0000

On Sun, 16 Sep 2012 14:27:34 -0700
Doug Barton wrote:


> Finally, I still think that making changes to the entropy-feeding
> methods in initrandom or random are premature until we have a chance
> to review Arthur's work on what's actually happening with the buffer.
> Until we know where the problems are, we're only guessing as to what
> the fixes should be.

The results are likely to be dependent on hardware, so it's going to
be difficult to get a complete picture. 

In particular I'd suggest pre-caching ls and /entropy to simulate very
fast flash drives.