Why setup the device when you should be able to open it way prior to chrooting (... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		drdaeman on July 15, 2014 \| parent \| context \| favorite \| on: LibreSSL's PRNG is Unsafe on Linux Why setup the device when you should be able to open it way prior to chrooting (if you don't - that's a proper time to abort() on my book) and keep the descriptor open for later use?

clarry on July 15, 2014 [–]

What if the random numbers are needed not by the daemon that chroots itself, but by a separate program that gets exec()'d within the chroot?

drdaeman on July 15, 2014 | [–]

A good point. Didn't thought about this case.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact