Re: svn commit: r239569 - head/etc/rc.d

On Thu, Sep 06, 2012 at 04:40:48PM -0700, Doug Barton wrote:
> It is way past time that you either demonstrate that your claim has
> merit, or stop making it.

Doug,
At this point what are you asking for?

* To run better_than_nothing() before feed_dev_random() with
  ${entropy_file}?

I addressed that in Message-ID: <[e-mail]>,
jhb in <[e-mail]>, and RW in
<[e-mail]>.

* To not run 'postrandom' to delete ${entropy_file}?

I addressed that in Message-ID: <[e-mail]>
and <[e-mail]>.

Our our own sys/dev/random/nehemiah.c follows this advice:
	 ...
	 * key, IV and the data are all read directly from the hardware RNG.
	 * All of these are used precisely once.
	 */

As does OpenBSD.

* To run 'ps' twice in better_than_nothing()?

I've addressed that in <[e-mail]> &
<[e-mail]>, and Ian Lepore in
<[e-mail]>.

-- 
-- David  ([e-mail])
_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"