diff options
| author | riastradh <riastradh@NetBSD.org> | 2023-06-30 21:42:29 +0000 |
|---|---|---|
| committer | riastradh <riastradh@NetBSD.org> | 2023-06-30 21:42:29 +0000 |
| commit | addc848837f06b793726badc98bee287ada3da67 (patch) | |
| tree | 634ce68879cf72b7d391246546c503cf606518ce /external | |
| parent | a681d7f6b89654d0d44d03f5b49e1eab83f4019f (diff) | |
security(5): Check kern.entropy.needed for confident entropy.
Don't test whether a non-blocking read from /dev/random would return
data.
For the sake of availability, /dev/random will unblock based on sources
like timer interrupts, which we can't confidently assert anything about
the actual unpredictability of.
Here, the goal is to highlight systems that have neither obtained
entropy from an HWRNG with a confident entropy assessment, nor been
seeded from a source the operator knows about.
XXX pullup-10
Diffstat (limited to 'external')
0 files changed, 0 insertions, 0 deletions
