Subject: Re: add rnd(4) to install floppy
To: Jun-ichiro itojun Hagino <itojun@itojun.org>
From: Klaus Klein <kleink@reziprozitaet.de>
List: tech-security
Date: 09/05/2003 18:17:25
itojun@itojun.org (Jun-ichiro itojun Hagino) writes:
>> I also think that the rnd(4) stuff is inappropriate.
>> A straight forward, cryptographically secure, random sequence generator
>> could be used - and wouldn't keep running out of entropy.
>> The only difficulty is getting enough randomness at the start.
>
> what do you suggest then? prepare a special libcrypt which does not
> use rnd(4) just for installation floppy?
Since the originial problem was about having a better PRNG accessible
to fsirand(8), a different (and less elegant) approach could be a flag
left behind by sysinst upon which fsirand is run on the file systems
early during the next boot sequence, using rnd(4).
- Klaus