cvs commit: src/games/fortune/fortune fortune.c

M. Warner Losh imp at bsdimp.com
Sat Jul 23 19:15:55 GMT 2005


In message: <42E29269.4030305 at root.org>
            Nate Lawson <nate at root.org> writes:
: Andrey A. Chernov wrote:
: > ache        2005-07-23 18:24:47 UTC
: > 
: >   FreeBSD src repository
: > 
: >   Modified files:
: >     games/fortune/fortune fortune.c 
: >   Log:
: >   My change, namely srandomdev() addition, was backed out even without
: >   discussing with me, and I obviously disagree seeing that afterwards
: >   (srandomdev() back out not fix any thing, it can only mask the problem).
: >   
: >   So, back out the back out and return srandomdev().
: >   
: >   People who have problems with repeated quotes should use -D fortune
: >   option for debugging to see is the problem in (1) /dev/random initialization
: >   or in (2) fortune code itself.
: 
: A bug in initializing /dev/random is a security issue and not one to be 
: taken lightly.  I hope whoever is affected by this puts some effort into 
: debugging it.

Agreed.  Andrey did the right thing here.  If we have /dev/random
problems, we need to find, fix and destroy them, not kludge around it
with 1980's microsecond technology.

Warner


More information about the cvs-all mailing list