CVS commit: src/sys/secmodel/securelevel

["Taylor R Campbell" <riastradh%netbsd.org@localhost>]

Module Name:    src
Committed By:   riastradh
Date:           Thu May 28 23:17:25 UTC 2020

Modified Files:
        src/sys/secmodel/securelevel: secmodel_securelevel.c

Log Message:
Accept ioctl(RNDADDDATA) estimates at securelevel 1 (but not 2).

securelevel=1 is supposed to be a reasonable default for normal
computers.  This got in the way of ever getting entropy from a seed
on a machine with no HWRNG -- e.g., from another machine, or by
making the executive decision that what has been sampled is good
enough and issuing `head -c 32 < /dev/urandom > /dev/random'.


To generate a diff of this commit:
cvs rdiff -u -r1.35 -r1.36 \
    src/sys/secmodel/securelevel/secmodel_securelevel.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.