5 ms·
true but even if we don't want to use /dev/random, there's still software using it all over the place that we don't necessarily want to patch. I end up install
by matt_wulfeck 11y ago
true but even if we don't want to use /dev/random, there's still software using it all over the place that we don't necessarily want to patch.
I end up installing haveged just because I don't want the system mysteriously locking up because some random daemon wants to create a 4096 bit key on first startup.
- viraptor 11y agoReplacing random with urandom for one app is just one LD_PRELOAD away. Similar to https://rafalcieslak.wordpress.com/2013/04/02/dynamic-linker-tricks-using-ld_preload-to-cheat-inject-features-and-investigate-programs/ https://rafalcieslak.wordpress.com/2013/04/02/dynamic-linker... you can replace open("/dev/random") with open("/dev/urandom")
- throwaway2048 11y agoIts much easier and less error prone to just replace the device node.
- viraptor 11y agoI'd rather go for a limited scope. But yes, one way or another, you don't have to suffer just because someone hardcoded /dev/random in the app.