Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 25 Jul 2005 20:22:24 +0400
From:      Andrey Chernov <ache@FreeBSD.ORG>
To:        Doug Barton <dougb@FreeBSD.ORG>
Cc:        Poul-Henning Kamp <phk@haven.freebsd.dk>, Pawel Jakub Dawidek <pjd@FreeBSD.ORG>, Colin Percival <cperciva@FreeBSD.ORG>, freebsd-security@FreeBSD.ORG
Subject:   Re: cvs commit: src/games/fortune/fortune fortune.c
Message-ID:  <20050725162224.GA93242@nagual.pp.ru>
In-Reply-To: <42E437AA.1050307@FreeBSD.org>
References:  <20050724135738.GM46538@darkness.comp.waw.pl> <64009.1122213962@phk.freebsd.dk> <20050724181912.GO46538@darkness.comp.waw.pl> <42E3DF1E.9040405@freebsd.org> <42E437AA.1050307@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Jul 24, 2005 at 05:51:54PM -0700, Doug Barton wrote:
> entropy_save_num="17"   # Number of entropy cache files to save.
> 
> And haven't seen any problems with repetitive fortunes in the last 2 days. 

Could you inspect old saved entries in setup when the bug is active? Are 
they the same across reboot? If no, it is dangerous too (probably bug in 
kernel random.c). As I read the code, even single _different_ byte will be 
enough to seed /dev/random to different values.

-- 
http://ache.pp.ru/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050725162224.GA93242>