cvs commit: src/etc/rc.d sshd

Dag-Erling Smørgrav des at des.no
Thu Aug 19 02:19:13 PDT 2004


Mark Murray <markm at FreeBSD.org> writes:
>   Log:
>   Give sshd a secure startup, but with a tweakable timeout so that
>   the box won't hang forever at startup.

This is just wrong.  The test in user_reseed() always evaluates to
true, regardless of the value of kern.random.sys.seeded, because that
value is either "0" or "1" but never "".  This is *really* annoying
when you try to start a jail that has sshd enabled but doesn't have
keys yet.

Also, user_reseed() should be a separate script so that other scripts
that need entropy can depend on it instead of duplicating it.

DES
-- 
Dag-Erling Smørgrav - des at des.no


More information about the cvs-all mailing list