Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #5414

Re: [SECURITY] [DSA 4187-1] linux security update

From Richard Lucassen <spamtrap@xaq.nl>
Newsgroups linux.debian.security
Subject Re: [SECURITY] [DSA 4187-1] linux security update
Date 2018-05-04 10:20 +0200
Message-ID <vLE6B-58k-7@gated-at.bofh.it> (permalink)
References <vKHgf-5Qb-9@gated-at.bofh.it> <vL92N-d1-1@gated-at.bofh.it> <vLaBz-1fM-1@gated-at.bofh.it> <vLipr-74q-3@gated-at.bofh.it> <vLykx-19d-1@gated-at.bofh.it>
Organization XAQ Systems

Show all headers | View raw


On Fri, 4 May 2018 10:06:58 +0800
Paul Wise <pabs@debian.org> wrote:

> > One of the consequences is that openntpd (or a program like
> > rdate) hangs until the crng is initialized.
> 
> What do these two programs require entropy for?

That's the question. The only thing I saw that these two programs
normally send 123/UDP packets to query the configured timeservers, but
apparently these packets are blocked until crng is initialized.
At least "rdate" uses "getrandom", that's what you see rdate is waiting
for when you "strace -p <pid rdate>"

-- 
___________________________________________________________________
It is better to remain silent and be thought a fool, than to speak
aloud and remove all doubt.

+------------------------------------------------------------------+
| Richard Lucassen, Utrecht                                        |
+------------------------------------------------------------------+

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Re: [SECURITY] [DSA 4187-1] linux security update Dominic Hargreaves <dom@earth.li> - 2018-05-03 01:10 +0200
  Re: [SECURITY] [DSA 4187-1] linux security update Ben Hutchings <benh@debian.org> - 2018-05-03 02:50 +0200
    Re: [SECURITY] [DSA 4187-1] linux security update richard lucassen <mailinglists@lucassen.org> - 2018-05-03 11:10 +0200
      Re: [SECURITY] [DSA 4187-1] linux security update Konstantin Khomoutov <kostix@bswap.ru> - 2018-05-03 12:00 +0200
      Re: [SECURITY] [DSA 4187-1] linux security update Paul Wise <pabs@debian.org> - 2018-05-04 04:10 +0200
        Re: [SECURITY] [DSA 4187-1] linux security update Richard Lucassen <spamtrap@xaq.nl> - 2018-05-04 10:20 +0200
        Re: [SECURITY] [DSA 4187-1] linux security update Davide Prina <davide.prina@gmail.com> - 2018-05-04 21:30 +0200
          Re: [SECURITY] [DSA 4187-1] linux security update Henrique de Moraes Holschuh <hmh@debian.org> - 2018-05-05 16:00 +0200

csiph-web