Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1e65f60a58
NetBSD/etc
History
riastradh 1e65f60a58 Tweak logic to decide whether a medium is safe for an rndseed. 
- Teach rndctl to load the seed, but treat it as zero entropy, if the
  medium is read-only or if the update fails.

- Teach rndctl to accept `-i' flag instructing it to ignore the
  entropy estimate in the seed.

- Teach /etc/rc.d/random_seed to:
  (a) assume nonlocal file systems are unsafe, and use -i, but
  (b) assume / is safe, even if it is nonlocal.
  If the medium is nonwritable, leave it to rndctl to detect that.
  (Could use statvfs and check for ST_LOCAL in rndctl, I guess, but I
  already implemented it this way.)

Treating nonlocal / as safe is a compromise: it's up to the operator
to secure the network for (e.g.) nfs mounts, but that's true whether
we're talking entropy or not -- if the adversary has access to the
network that you've mounted / from, they can do a lot more damage
anyway; this reduces warning fatigue for diskless systems, e.g. test
racks.
2020-05-06 18:49:26 +00:00
..
autofs
bluetooth
defaults Add a default dhcpcd_chrootdir 2020-04-02 13:02:05 +00:00
etc.aarch64 Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.acorn32 remove nsmb from MD list of devices to create for 'all' 2020-04-05 14:09:17 +00:00
etc.algor Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.alpha remove nsmb from MD list of devices to create for 'all' 2020-04-05 14:09:17 +00:00
etc.amd64 remove nsmb from MD list of devices to create for 'all' 2020-04-05 14:09:17 +00:00
etc.amiga remove nsmb from MD list of devices to create for 'all' 2020-04-05 14:09:17 +00:00
etc.amigappc remove nsmb from MD list of devices to create for 'all' 2020-04-05 14:09:17 +00:00
etc.arc Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.atari Remove ISDN from the kernel. It has remained unmaintained for a long time, 2018-09-23 09:20:57 +00:00
etc.bebox Remove the satlink driver. It was disabled everywhere, had no man page and 2019-01-27 08:53:28 +00:00
etc.cats Remove ISDN from the kernel. It has remained unmaintained for a long time, 2018-09-23 09:20:57 +00:00
etc.cesfic Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.cobalt remove nsmb from MD list of devices to create for 'all' 2020-04-05 14:09:17 +00:00
etc.dreamcast
etc.emips Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.epoc32 Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.evbarm Remove commented out IGEPV2 entry 2019-11-03 12:16:35 +00:00
etc.evbcf Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.evbmips Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.evbppc Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.evbsh3 Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.ews4800mips Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.hp300 Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.hpcarm
etc.hpcmips Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.hpcsh
etc.hppa Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.i386 remove nsmb from MD list of devices to create for 'all' 2020-04-05 14:09:17 +00:00
etc.ia64 remove nsmb from MD list of devices to create for 'all' 2020-04-05 14:09:17 +00:00
etc.ibmnws
etc.iyonix Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.landisk remove nsmb from MD list of devices to create for 'all' 2020-04-05 14:09:17 +00:00
etc.luna68k Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.mac68k Build and install WSFB and WSFBSBC. 2019-07-26 11:38:21 +00:00
etc.macppc Support the use of DHCP in the install environment 2020-04-05 14:36:43 +00:00
etc.mipsco Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.mmeye Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.mvme68k Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.mvmeppc Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.netwinder Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.news68k Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.newsmips Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.next68k Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.ofppc build GENERIC64 only on ofppc64 (doesn't build, but a least fails 2019-11-18 01:11:14 +00:00
etc.or1k Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.playstation2 Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.pmax Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.prep Remove ISDN from the kernel. It has remained unmaintained for a long time, 2018-09-23 09:20:57 +00:00
etc.riscv Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.rs6000 Remove ISDN from the kernel. It has remained unmaintained for a long time, 2018-09-23 09:20:57 +00:00
etc.sandpoint Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.sbmips Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.sgimips Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.shark Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.sparc remove nsmb from MD list of devices to create for 'all' 2020-04-05 14:09:17 +00:00
etc.sparc64 remove nsmb from MD list of devices to create for 'all' 2020-04-05 14:09:17 +00:00
etc.sun2 sun2 kernel is restricted to ~2MB due to bootloader. 2020-03-08 06:23:18 +00:00
etc.sun3
etc.vax Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
etc.x68k Remove ISDN from the kernel. It has remained unmaintained for a long time, 2018-09-23 09:20:57 +00:00
etc.zaurus Switch default console tty from /dev/console to /dev/constty 2019-09-25 23:09:19 +00:00
iscsi
mtree Add a place for the debug modules. 2020-05-01 22:26:11 +00:00
namedb Update to 2019093001 2019-10-09 22:58:39 +00:00
pam.d Add a commented out entry for pam_u2f.so 2020-03-03 00:47:33 +00:00
powerd
rc.d Tweak logic to decide whether a medium is safe for an rndseed. 2020-05-06 18:49:26 +00:00
root remove no longer existing gnu/* from cdpath. 2019-12-04 08:21:50 +00:00
skel
ssh
aliases
auto_master
bootptab
changelist
crontab Fix skipped daily in Eastern Europe 2020-03-29 06:44:16 +00:00
csh.cshrc
csh.login
csh.logout
daily Convert uses of test (ie: '[') to use only POSIX specified forms, 2018-09-23 23:16:34 +00:00
daily.conf
disktab
dm.conf
envsys.conf
floppytab
ftpchroot
ftpusers
gettytab
gpio.conf
group Add _dhcpcd user and group 2020-04-02 12:35:13 +00:00
hosts
hosts.equiv
hosts.lpd
inetd.conf
locate.conf
login.conf
mailer.conf
MAKEDEV.awk PR port-arm/54640: hack to work around conditional RAW_PART definition in 2019-11-03 12:03:35 +00:00
MAKEDEV.local
MAKEDEV.tmpl remove nsmb(4) 2020-04-04 16:04:36 +00:00
Makefile It is KERNEL_DIR 2020-04-27 01:07:27 +00:00
Makefile.params Document NETBSD_OFFICIAL_RELEASE and add it to /etc/release - it is 2019-11-22 13:30:19 +00:00
man.conf
master.passwd Add _dhcpcd user and group 2020-04-02 12:35:13 +00:00
minfree
mkttys
monthly
monthly.conf
motd.beta http -> https 2019-05-28 18:25:23 +00:00
motd.current http -> https 2019-05-28 18:25:23 +00:00
motd.default
motd.rc http -> https 2019-05-28 18:25:23 +00:00
motd.stable http -> https 2019-05-28 18:25:23 +00:00
mrouted.conf
named.conf remove obsolete option 2020-03-21 20:20:59 +00:00
netconfig
networks
newsyslog.conf Specify PID file to properly rotate npf log file. 2019-05-16 20:12:35 +00:00
nsswitch.conf
ntp.conf
passwd.conf
phones
pkgpath.conf
printcap
profile
protocols regen 2019-01-03 17:30:06 +00:00
rbootd.conf
rc
rc.conf
rc.local
rc.shutdown
rc.subr Prevent waiting for processes to exit forever by introducing _rc_kill_ntries, 2020-04-05 21:03:08 +00:00
remote
rpc
security Save the entropy seed daily in /etc/security. 2019-12-06 14:43:29 +00:00
security.conf
services sync with latest from IANA 2019-10-09 22:42:14 +00:00
shells
shrc
sysctl.conf
syslog.conf
weekly Convert to POSIX specified usage of test (even though it would probably 2018-09-23 23:12:21 +00:00
weekly.conf
wpa_supplicant.conf Add a default wpa_supplicant.conf which allows wpa_cli(8) to configure 2019-01-12 16:51:54 +00:00
wscons.conf