[Bug 191918] New: /usr/libexec/save-entropy wastes entropy for each running jail

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Jul 17 09:33:29 UTC 2014


            Bug ID: 191918
           Summary: /usr/libexec/save-entropy wastes entropy for each
                    running jail
           Product: Base System
           Version: 9.2-STABLE
          Hardware: Any
                OS: Any
            Status: Needs Triage
          Severity: Affects Some People
          Priority: ---
         Component: misc
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: eugen at grosbein.net

Created attachment 144748
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=144748&action=edit
stop save-ontropy if jailed

/etc/rc.d/initrandom uses saved entropy to seed it to /dev/random. This script
has "KEYWORD: nojail" so it is not run when full-blown jail starts, that's just

Default /etc/crontab runs /usr/libexec/save-entropy to save entropy for host
and for each jail, that's not fine. Jailed /usr/libexec/save-entropy
invocations just waste entropy.

Workaround: comment out /usr/libexec/save-entropy in /etc/crontab for each
running jail and each future jail.

Fix: use attached patch to fix save-entropy so it just stops if jailed.

You are receiving this mail because:
You are the assignee for the bug.

More information about the freebsd-bugs mailing list