[Opendnssec-user] ods-signerd calling vmstat?!?
Wytze van der Raay
wytze at deboca.net
Thu Sep 5 08:02:30 UTC 2013
Op 4-9-2013 21:08, Paul Wouters schreef:
> On Tue, 3 Sep 2013, Rickard Bellgrim wrote:
> ...
> And then a million "A"s flood in from filenames in /tmp ?
>
>> What I can do is to forward your concerns to the Botan mailing list.
>> To discuss the usage of "ls -alni /tmp" as one of the low priority
>> sources.
>
> Although that's the worst one, I think any command that can be strongly
> influenced by a local user who could also drain the entropy pool should
> never be used.
If you are allowing local users on your system running opendnssec, why
even bother about quality problems of the entropy fed into the PRNG?
Your problem is elsewhere I'd say ...
Regards,
Wytze van der Raay
More information about the Opendnssec-user
mailing list