Messages in this thread | | | From | "Gilles Espinasse" <> | Subject | Re: [PATCH] drivers/net: remove network drivers' last few uses of IRQF_SAMPLE_RANDOM | Date | Mon, 26 May 2008 23:08:02 +0200 |
| |
----- Original Message ----- From: "Theodore Tso" <tytso@MIT.EDU> To: "Glen Turner" <gdt@gdt.id.au> Cc: "Chris Peterson" <cpeterso@cpeterso.com>; "Alan Cox" <alan@lxorguk.ukuu.org.uk>; "Lennart Sorensen" <lsorense@csclub.uwaterloo.ca>; "Jeff Garzik" <jeff@garzik.org>; "Kok, Auke" <auke-jan.h.kok@intel.com>; "Rick Jones" <rick.jones2@hp.com>; "Brandeburg, Jesse" <jes> Sent: Monday, May 26, 2008 1:27 AM Subject: Re: [PATCH] drivers/net: remove network drivers' last few uses of IRQF_SAMPLE_RANDOM
... > > There is a reason why /dev/random is world-writeable; it's perfectly > safe to write arbitary amounts of data into /dev/random. If the > attacker doesn't know what has been fixed into the entropy pool, his > life just got a lot harder. If it is the attacker mixing known data > into the pool, it's no worse. > man 4 random recommand to save /dev/urandom during stop and seed /dev/urandom at start. For wich reason is it not recommanded to save and seed using /dev/random?
Gilles
| |