Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 03 Sep 2019 14:07:07 -0000
From:      Ian Lepore <ian@freebsd.org>
To:        cem@freebsd.org, Warner Losh <imp@bsdimp.com>
Cc:        src-committers <src-committers@freebsd.org>, svn-src-all <svn-src-all@freebsd.org>, svn-src-head <svn-src-head@freebsd.org>
Subject:   Re: svn commit: r346250 - in head: share/man/man4 share/man/man9 sys/dev/random sys/kern sys/libkern sys/sys
Message-ID:  <0aedf8b8c91c2f9f76249c0a13e971fbb9aac16a.camel@freebsd.org>
In-Reply-To: <CAG6CVpW2RSBGVZFZota4j4nDDVzKUzOKXhaJtFNO9xx1js6NrA@mail.gmail.com>
References:  <201904151840.x3FIeaEQ009242@repo.freebsd.org> <CAPyFy2D9NQQKwVx5MhCfasQ82x7C9s6mj5kXuDE1oogrQeoJ5A@mail.gmail.com> <CAHSQbTAfwYcLenBxg4ZB13P03S%2BTYEM1-xy3BYsSWJ49hBWLZA@mail.gmail.com> <CAG6CVpXwOhSpmCT1SShvEOZAdjbQSk5xSzk%2BLk8c5fMpnhSKQw@mail.gmail.com> <CAG6CVpUqy75_iEU-OwC21LOQFrXTO7rMz3B4iHi7GBTfsqK_5w@mail.gmail.com> <20190416150352.c604a280368ccb2992a861e8@bidouilliste.com> <CANCZdfqwfdPnr3HBAw6=YdPW_0yLsS4OpJMhiqFxWSM6BVJ-Zw@mail.gmail.com> <310a420ee0b9e12249979d89dc4fa0d4cac5a8dc.camel@freebsd.org> <CANCZdfrNsBMqKrnqVzTNVNwCcHj5ZYrKhjss_%2Bp6i=rKqwYFNA@mail.gmail.com> <CAG6CVpW_Tjz_mPmMPForKAO3gLhES63TtdNyZcg0pTkb3z%2BTRw@mail.gmail.com> <CANCZdfqsY0RAJv7fKj9Fyb34wmxCULFCFi4Ph8s2bYPWtVP6fA@mail.gmail.com> <CAG6CVpW2RSBGVZFZota4j4nDDVzKUzOKXhaJtFNO9xx1js6NrA@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 2019-04-16 at 09:58 -0700, Conrad Meyer wrote:
> Systems lacking both an NV store and an entropy source available
> during mi_startup (i.e., not interrupts...) cannot safely provide
> entropy in early boot.  On those systems, we must disable random
> consumption during early boot.

Or you could remember that one of the core unix philosphies is "tools,
not policy" and leave it to embedded systems developers to decide for
themselves what's "safe" or not.  Not every application needs
cryptographic strength entropy, especially for things like retrying
after a short random delay or generating a random MAC address or
whatever.

-- Ian






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0aedf8b8c91c2f9f76249c0a13e971fbb9aac16a.camel>