NetBSD/distrib
riastradh cba96d16f7 Various entropy integration improvements.
- New /etc/security check for entropy in daily security report.

- New /etc/rc.d/entropy script runs (after random_seed and rndctl) to
  check for entropy at boot -- in rc.conf, you can:

  . set `entropy=check' to halt multiuser boot and enter single-user
    mode if not enough entropy

  . set `entropy=wait' to make multiuser boot wait until enough entropy

  Default is to always boot without waiting -- and rely on other
  channels like security report to alert the operator if there's a
  problem.

- New man page entropy(7) discussing the higher-level concepts and
  system integration with cross-references.

- New paragraph in afterboot(8) about entropy citing entropy(7) for
  more details.

This change addresses many of the issues discussed in security/55659.
This is a first draft; happy to take improvements to the man pages and
scripted messages to improve clarity.

I considered changing motd to include an entropy warning with a
reference to the entropy(7) man page, but it's a little trickier:
- Not sure it's appropriate for all users to see at login rather than
  users who have power to affect the entropy estimate (maybe it is,
  just haven't decided).
- We only have a mechanism for changing once at boot; the message would
  remain until next boot even if an operator adds enough entropy.
- The mechanism isn't really conducive to making a message appear
  conditionally from boot to boot.
2021-01-10 23:24:25 +00:00
..
acorn32 PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
alpha s/parition/partition/ 2020-09-29 02:49:55 +00:00
amd64 Look for the string "amazon" in a few different sysctl nodes. There doesn't 2020-09-09 13:25:48 +00:00
amiga Use proper release version strings ("9.1" rather than "91") in banners. 2020-12-05 18:52:06 +00:00
arc Shrink ramdisk to make RAMDISK kernel smaller for ARC BIOS restriction. 2020-05-29 23:12:12 +00:00
atari Provide wdboot as a link of sdboot for Milan also in sysinst. 2020-06-18 18:14:06 +00:00
bebox bump bebox and prep image sizes for GCC 9. 2020-09-15 08:13:51 +00:00
cats PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
cdrom Copy -current to 9.0, this has diverged (macppc 601 support and others, 2019-12-05 10:25:41 +00:00
cobalt Fix ramdisk overflow: 2020-10-04 09:42:48 +00:00
common Copy release to /${RELEASEMACHINEDIR} instead of /${MACHINE} to match 2020-10-11 14:10:04 +00:00
dreamcast Try to shrink ramdiskbin binary. 2020-11-28 05:16:06 +00:00
emips PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
evbarm Correctly support aarch64eb and earmv7hfeb in a similar manner to 2020-11-16 11:38:29 +00:00
evbmips Rename the evbmips ERLITE kernel to OCTEON now that it supports more 2020-07-15 12:15:30 +00:00
evbppc Bump ramdisk size slightly 2020-11-06 18:36:20 +00:00
evbsh3 PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
ews4800mips Put a message in build error logs to notify what this target builds. 2020-06-14 05:10:33 +00:00
hp300 Use proper release version strings ("9.1" rather than "91") in banners. 2020-12-05 18:52:06 +00:00
hpcarm Add "build.sh live-image" support for hpcarm. 2020-03-21 14:25:49 +00:00
hpcmips PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
hpcsh PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
hppa PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
i386 Bump INSTIMAGEMB, hopefully fix releng autobuilds 2020-05-06 09:18:10 +00:00
ia64 Consistently use ${RELEASEDIR}/${RELEASEMACHINE} instead of 2019-09-23 13:42:30 +00:00
ibmnws 1. Remove all the special handling of variables (-d -p -P -s -S) that 2019-12-29 18:26:16 +00:00
landisk PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
luna68k Bump ramdisk size to 2MB. 2020-05-19 09:02:48 +00:00
mac68k Use proper release version strings ("9.1" rather than "91") in banners. 2020-12-05 18:52:06 +00:00
macppc Support the use of DHCP in the install environment 2020-04-05 14:36:43 +00:00
miniroot Fetch files via ftp using auto-fetching with URL per each binary set. 2020-12-12 05:23:21 +00:00
mipsco PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
mvme68k Use proper release version strings ("9.1" rather than "91") in banners. 2020-12-05 18:52:06 +00:00
mvmeppc Consistently use ${RELEASEDIR}/${RELEASEMACHINE} instead of 2019-09-23 13:42:30 +00:00
news68k Use more shrinked x_foo binaries. 2020-06-13 19:15:43 +00:00
newsmips PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
notes Add A1659A CRX framebuffer to "Supported hardware" list. 2020-12-23 17:57:17 +00:00
ofppc PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
playstation2 PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
pmax bump image size for pmax64 builds. 2020-09-07 09:05:10 +00:00
prep bump bebox and prep image sizes for GCC 9. 2020-09-15 08:13:51 +00:00
riscv PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
rs6000 PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
sandpoint PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
sets Various entropy integration improvements. 2021-01-10 23:24:25 +00:00
sgimips PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
shark PR install/54780: in the (of course totally unlikely) case that sysinst 2020-01-09 19:17:40 +00:00
sparc bump a little for llvm 2020-01-29 16:24:21 +00:00
sparc64 Get back to terminfo.cdb. 2020-03-27 15:18:22 +00:00
sun2 Use proper release version strings ("9.1" rather than "91") in banners. 2020-12-05 18:52:06 +00:00
sun3 Use proper release version strings ("9.1" rather than "91") in banners. 2020-12-05 18:52:06 +00:00
syspkg Reintroduce the support of MKCATPAGES 2020-11-10 21:47:40 +00:00
utils Fix fallout from mkimage rev 1.76. 2020-12-23 10:35:18 +00:00
vax kernfs no longer needs a hacky workaround to make rootdev appear. 2020-02-26 16:00:48 +00:00
x68k Replace boot_ustar with xxboot_ustarfs. 2020-08-16 07:03:45 +00:00
zaurus Add "build.sh live-image" support for zaurus. 2020-03-21 14:24:12 +00:00
Makefile
Makefile.inc