/dev/random

/dev/random

[Wojciech Kromer]

anyone has sucesses with /dev/random ?
how to switch it to another sources (i do not have keyboard and mouse on
my ebedded ppc platform)

--
* * * * * * * * * * * *
* per pedes ad astra! *
* * * * * * * * * * * *    mailto:krom@dgt-lab.com.pl


** Sent via the linuxppc-embedded mail list. See http://lists.linuxppc.org/

Re: /dev/random

[Wojciech Kromer]

Użytkownik Wojciech Kromer napisał:

>
> anyone has sucesses with /dev/random ?
> how to switch it to another sources (i do not have keyboard and mouse on
> my ebedded ppc platform)
>
> --

OK, i solved this quickly, just adding SA_SAMPLE_RANDOM flag in fec.c

--
* * * * * * * * * * * *
* per pedes ad astra! *
* * * * * * * * * * * *    mailto:krom@dgt-lab.com.pl


** Sent via the linuxppc-embedded mail list. See http://lists.linuxppc.org/

/dev/random

[Russell Coker]

I've been playing with SSP (AKA ProPolice).  It seems that SSP requires
/dev/urandom access for useful operation, and thus every domain that runs a 
SSP compiled program (IE every domain which has a privileged process dealing 
with untrusted data) needs /dev/urandom access.

Also shell scripts sometimes fall into the category of privileged processes 
using untrusted data which means that every domain which has a shell script 
asks for /dev/urandom access.

Consequently I plan to introduce a new type so that I can enable urandom 
access without enabling random access, and allow many system domains to 
access /dev/urandom.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.