[Opendnssec-user] ods-signerd calling vmstat?!?

Wytze van der Raay wytze at deboca.net
Thu Sep 5 08:02:30 UTC 2013


Op 4-9-2013 21:08, Paul Wouters schreef:
> On Tue, 3 Sep 2013, Rickard Bellgrim wrote:
> ...
> And then a million "A"s flood in from filenames in /tmp ?
> 
>> What I can do is to forward your concerns to the Botan mailing list.
>> To discuss the usage of "ls -alni /tmp" as one of the low priority
>> sources.
> 
> Although that's the worst one, I think any command that can be strongly
> influenced by a local user who could also drain the entropy pool should
> never be used.

If you are allowing local users on your system running opendnssec, why
even bother about quality problems of the entropy fed into the PRNG?
Your problem is elsewhere I'd say ...

Regards,
Wytze van der Raay




More information about the Opendnssec-user mailing list