Re: [PATCH RFC] Disable save-entropy in jails

2013-12-25 Thread Pawel Jakub Dawidek
On Tue, Dec 24, 2013 at 12:44:34PM -0800, Xin Li wrote: > Hi, > > I think we shouldn't save entropy inside jails, as the data is not going > to be used by rc script (pjd@126744). If there is no objections, I will > commit this changeset on January 1, 2014. I agree we shouldn't do it. I have this

Re: [PATCH RFC] Disable save-entropy in jails

2013-12-25 Thread Mark R V Murray
On 25 Dec 2013, at 02:04, Xin Li wrote: > No, we are not talking about removing /var/db/entropy. What I am > proposing to do is to disable entropy savings from jails. Here is why: > > The way a PRNG works is that it uses one or many entropy sources to > "feed" its internal state, and generate

Re: [PATCH RFC] Disable save-entropy in jails

2013-12-24 Thread Paul Hoffman
On Dec 24, 2013, at 2:53 PM, Xin Li wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 12/24/13 14:36, Paul Hoffman wrote: >> On Dec 24, 2013, at 12:44 PM, Xin Li wrote: >> >>> I think we shouldn't save entropy inside jails, as the data is >>> not going to be used by rc script (

Re: [PATCH RFC] Disable save-entropy in jails

2013-12-24 Thread Xin Li
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 12/24/13 15:26, Paul Hoffman wrote: > On Dec 24, 2013, at 2:53 PM, Xin Li wrote: > >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 >> >> On 12/24/13 14:36, Paul Hoffman wrote: >>> On Dec 24, 2013, at 12:44 PM, Xin Li >>> wrote: >>> I

Re: [PATCH RFC] Disable save-entropy in jails

2013-12-24 Thread John-Mark Gurney
Paul Hoffman wrote this message on Tue, Dec 24, 2013 at 15:26 -0800: > On Dec 24, 2013, at 2:53 PM, Xin Li wrote: > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA512 > > > > On 12/24/13 14:36, Paul Hoffman wrote: > >> On Dec 24, 2013, at 12:44 PM, Xin Li wrote: > >> > >>> I think we shou

Re: [PATCH RFC] Disable save-entropy in jails

2013-12-24 Thread Paul Hoffman
On Dec 24, 2013, at 12:44 PM, Xin Li wrote: > I think we shouldn't save entropy inside jails, as the data is not going > to be used by rc script (pjd@126744). If there is no objections, I will > commit this changeset on January 1, 2014. Even if it is not used by an rc script, it might be used b

Re: [PATCH RFC] Disable save-entropy in jails

2013-12-24 Thread Xin Li
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 12/24/13 14:36, Paul Hoffman wrote: > On Dec 24, 2013, at 12:44 PM, Xin Li wrote: > >> I think we shouldn't save entropy inside jails, as the data is >> not going to be used by rc script (pjd@126744). If there is no >> objections, I will commi

[PATCH RFC] Disable save-entropy in jails

2013-12-24 Thread Xin Li
Hi, I think we shouldn't save entropy inside jails, as the data is not going to be used by rc script (pjd@126744). If there is no objections, I will commit this changeset on January 1, 2014. Index: libexec/save-entropy/save-entropy.sh =