Fix /etc/rc.d/random umask handling (/entropy permissions)

[Lu Tung-Pin]

A 2014 change broke the umask handling in /etc/rc.d/random,
leaving /entropy with ug+r permissions. Quick fix attached,
mirroring random_stop() behavior.

(Incidentally, /usr/libexec/save-entropy is still fine for
/var/db/entropy/*, as is /etc/rc.d/random for the new
/boot/entropy.)



--- /etc/rc.d/random.old        2017-01-21 11:48:30.975009000 +1100
+++ /etc/rc.d/random    2017-01-19 18:04:34.224632000 +1100
@@ -20,12 +20,15 @@

  save_dev_random()
  {
+       oumask=`umask`
+       umask 077
         for f ; do
                 if :>>"$f" ; then
                         debug "saving entropy to $f"
                         dd if=/dev/random of="$f" bs=4096 count=1 
2>/dev/null
                 fi
         done
+       umask ${oumask}
  }

  feed_dev_random()
-------------- next part --------------
A non-text attachment was scrubbed...
Name: random.diff
Type: text/x-diff
Size: 371 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-current/attachments/20170121/20c242e9/attachment.diff>