[Bug 191918] New: /usr/libexec/save-entropy wastes entropy for each running jail

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=191918

            Bug ID: 191918
           Summary: /usr/libexec/save-entropy wastes entropy for each
                    running jail
           Product: Base System
           Version: 9.2-STABLE
          Hardware: Any
                OS: Any
            Status: Needs Triage
          Severity: Affects Some People
          Priority: ---
         Component: misc
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: eugen at grosbein.net

Created attachment 144748
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=144748&action=edit
stop save-ontropy if jailed

/etc/rc.d/initrandom uses saved entropy to seed it to /dev/random. This script
has "KEYWORD: nojail" so it is not run when full-blown jail starts, that's just
fine.

Default /etc/crontab runs /usr/libexec/save-entropy to save entropy for host
and for each jail, that's not fine. Jailed /usr/libexec/save-entropy
invocations just waste entropy.

Workaround: comment out /usr/libexec/save-entropy in /etc/crontab for each
running jail and each future jail.

Fix: use attached patch to fix save-entropy so it just stops if jailed.

-- 
You are receiving this mail because:
You are the assignee for the bug.