cvs commit: src/games/fortune/fortune fortune.c

Poul-Henning Kamp phk at phk.freebsd.dk
Sun Jul 24 14:06:06 GMT 2005


In message <20050724135738.GM46538 at darkness.comp.waw.pl>, Pawel Jakub Dawidek writes:

>We should probably test entropy quality on boot.
>I've somewhere userland version of /sys/dev/rndtest/ which implements
>FIPS140-2 tests for (P)RNGs. We can use put it into rc.d/ and warn users.

We also need to put code into exec(2) to verify that the binary we're about
to execute does not suffer from Turings halting problem (ie: contains no
endless loops) 

We might as well inspect for buffer overflows at the same time.

Anyway, back in this universe:  We should not stick a lot of stuff into
our boot-time scripts, they are slow enough already.


-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.


More information about the cvs-src mailing list