4 ms·

How about passing the /dev/urandom file descriptor to the new process? That seems like the most robust solution to me.

• amalcon 12y ago
  That does work well.
• vidarh 12y ago
  That assumes that first process after the chroot knows how to receive and pass on that filedescriptor to the process that will eventually use libressl, which is not a given.