53f527be190 - symlinking /dev/urandom into raddb/certs
I just got surprised by this; one possible side effect that might have been missed here, it stops you doing this: grep -r something /etc/raddb ...as it spins forever on the random device. Not sure why I've never seen it before when testing 3.0.x
I just got surprised by this; one possible side effect that might have been missed here, it stops you doing this: grep -r something /etc/raddb ...as it spins forever on the random device. Not sure why I've never seen it before when testing 3.0.x
I have, but didn't investigate further... #newbiemove :-/ Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.
Hi,
I just got surprised by this; one possible side effect that might have been missed here, it stops you doing this:
grep -r something /etc/raddb
...as it spins forever on the random device.
Not sure why I've never seen it before when testing 3.0.x
because its new? i'm not sure why theres the symlink..... as its quite easy to just define the urandom in the eap module...and if its not int he right place then a symlink would b0rk anyway...I cant think how it'd help a chroot'd system either (I've got a feeling that is why its there) alan
On Mar 9, 2015, at 9:05 AM, A.L.M.Buxey@lboro.ac.uk wrote:
because its new? i'm not sure why theres the symlink..... as its quite easy to just define the urandom in the eap module...and if its not int he right place then a symlink would b0rk anyway...I cant think how it'd help a chroot'd system either (I've got a feeling that is why its there)
It should be changed so that the default config is to read /dev/urandom Alan DeKok.
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Phil Mayers -
Stefan Paetow