diff options
| author | obrien <obrien@FreeBSD.org> | 2012-08-22 18:43:21 +0000 |
|---|---|---|
| committer | obrien <obrien@FreeBSD.org> | 2012-08-22 18:43:21 +0000 |
| commit | 1103474a1b620f985700209f4d64623f9e47db77 (patch) | |
| tree | 9fe77158cb4fab9ca13a3136bb199db1adda88a2 /etc/rc.d/random | |
| parent | fb4ec977240f0d977e439951415e7e21a788f5a7 (diff) | |
| download | FreeBSD-src-1103474a1b620f985700209f4d64623f9e47db77.zip FreeBSD-src-1103474a1b620f985700209f4d64623f9e47db77.tar.gz | |
Remove old entropy seeding after consumption initializing /dev/random PRNG.
Not doing so opens us up to replay attacks.
Submitted by: Arthur Mesh <arthurmesh@gmail.com>
Sponsored by: Juniper Networks
Diffstat (limited to 'etc/rc.d/random')
| -rwxr-xr-x | etc/rc.d/random | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/etc/rc.d/random b/etc/rc.d/random index 160b1d4..8d9fd44 100755 --- a/etc/rc.d/random +++ b/etc/rc.d/random @@ -4,7 +4,7 @@ # # PROVIDE: random -# REQUIRE: var initrandom +# REQUIRE: initrandom var # BEFORE: netif # KEYWORD: nojail shutdown @@ -14,6 +14,9 @@ name="random" start_cmd="random_start" stop_cmd="random_stop" +extra_commands="saveseed" +saveseed_cmd="${name}_stop" + feed_dev_random() { if [ -f "${1}" -a -r "${1}" -a -s "${1}" ]; then |
