From owner-freebsd-security@FreeBSD.ORG Sat Sep 15 11:55:10 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 56A9A106566C for ; Sat, 15 Sep 2012 11:55:10 +0000 (UTC) (envelope-from markm@FreeBSD.org) Received: from gromit.grondar.org (grandfather.grondar.org [IPv6:2a01:348:0:15:5d59:5c20:0:2]) by mx1.freebsd.org (Postfix) with ESMTP id CB1898FC15 for ; Sat, 15 Sep 2012 11:55:09 +0000 (UTC) Received: from uucp by gromit.grondar.org with local-rmail (Exim 4.77 (FreeBSD)) (envelope-from ) id 1TCqxo-00068q-V0 for freebsd-security@freebsd.org; Sat, 15 Sep 2012 12:55:08 +0100 Received: from localhost ([127.0.0.1] helo=groundzero.grondar.org) by groundzero.grondar.org with esmtp (Exim 4.77 (FreeBSD)) (envelope-from ) id 1TCqaC-000N93-4k; Sat, 15 Sep 2012 12:30:44 +0100 To: Ben Laurie In-reply-to: References: <50453686.9090100@FreeBSD.org> <20120911082309.GD72584@dragon.NUXI.org> <504F0687.7020309@FreeBSD.org> <201209121628.18088.jhb@freebsd.org> <5050F477.8060409@FreeBSD.org> <20120912213141.GI14077@x96.org> <20120913052431.GA15052@dragon.NUXI.org> From: Mark Murray Date: Sat, 15 Sep 2012 12:30:44 +0100 Message-Id: Cc: Arthur Mesh , Ian Lepore , Doug Barton , freebsd-security@freebsd.org, RW , "Bjoern A. Zeeb" Subject: Re: svn commit: r239569 - head/etc/rc.d X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 15 Sep 2012 11:55:10 -0000 Ben Laurie writes: > > Reseeds are expensive in kernel space; locking/unlocking and thread > > consumption are the issue. Right now, this is mitigated by reseeding > > at 10Hz. To allow reseeds to overwhelm the running kernel by pumping > > data into /dev/random is would be very silly indeed, and I'm not > > going to let that happen. > > I'm curious what the comparative cost of > > cat /dev/zero > /dev/null > > is? > > Or, > > cat /dev/zero > somefile 10+ years ago, on a different continent, I had this data. 1 burglary and one intercontinental relocation later, and I don't have it any more. Recreating is something I'll likely get to, but DHYB. M -- Mark R V Murray Pi: 132511160