Re: [SECURITY] [DSA 4187-1] linux security update
On Fri, 4 May 2018 10:06:58 +0800
Paul Wise <pabs@debian.org> wrote:
> > One of the consequences is that openntpd (or a program like
> > rdate) hangs until the crng is initialized.
>
> What do these two programs require entropy for?
That's the question. The only thing I saw that these two programs
normally send 123/UDP packets to query the configured timeservers, but
apparently these packets are blocked until crng is initialized.
At least "rdate" uses "getrandom", that's what you see rdate is waiting
for when you "strace -p <pid rdate>"
--
___________________________________________________________________
It is better to remain silent and be thought a fool, than to speak
aloud and remove all doubt.
+------------------------------------------------------------------+
| Richard Lucassen, Utrecht |
+------------------------------------------------------------------+
Reply to: