Removal of support for systems without /dev/urandom.

Ira Cooper ira at samba.org
Sat Feb 15 08:07:22 MST 2014


This is a patch to clean up 2 Coverity issues that really pointed at a
larger issue in our code base.

The code used for seeding the random number generator, without
/dev/urandom, is not currently insecure, but it is time to deal with it
before it becomes so.

I've put a check into waf to break configure if it can not find
/dev/urandom.  If you defeat that, you will run into a #error compiling
without /dev/urandom.  If you get past all that... you get what you deserve
;).

I hope that is sufficient to warn people about the change.

Code is enclosed,

-Ira
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-lib-util-Make-dev-urandom-required.patch
Type: text/x-patch
Size: 4097 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20140215/e9ed4764/attachment.bin>


More information about the samba-technical mailing list