--0016364ec7eaf5a8f80495e2ce72
Content-Type: text/plain; charset=ISO-8859-1
Dear DragonFlyBSD bugs,
Alex Hornung recently (today ?) added mmap randomisation (security feature),
but in his commit he uses:
karc4random()
When he should really be using the superior kernel random number generator
presented to userland via
/dev/random
and
/dev/urandom
There are other portions of Kernel code which needs to do the same, e.g. I
think OpenBSDs PF Packet
Filter uses karc4random() ....
--
Sincerely,
Robin Carey
--0016364ec7eaf5a8f80495e2ce72
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
<div>Dear DragonFlyBSD bugs,</div>
<div>=A0</div>
<div>Alex Hornung recently (today ?) added mmap randomisation (security fea=
ture), but in his commit he uses:</div>
<div>=A0</div>
<div>karc4random()</div>
<div>=A0</div>
<div>When he should really be using the superior kernel random number gener=
ator presented to userland via</div>
<div>=A0</div>
<div>/dev/random</div>
<div>=A0</div>
<div>and</div>
<div>=A0</div>
<div>/dev/urandom</div>
<div>=A0</div>
<div>There are other portions of Kernel code which needs to do the same, e.=
g. I think OpenBSDs PF Packet</div>
<div>Filter uses karc4random() ....<br clear=3D"all"><br>-- <br>Sincerely,<=
br>Robin Carey<br></div>
--0016364ec7eaf5a8f80495e2ce72--