summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support/rng-tools
diff options
context:
space:
mode:
authorRichard Purdie <richard.purdie@linuxfoundation.org>2017-11-03 16:17:01 +0000
committerRichard Purdie <richard.purdie@linuxfoundation.org>2017-11-05 13:40:33 +0000
commitb3b7ee4097b42b06f92127ca98663a96284ee185 (patch)
tree552a0aa1eef72fda9bd757ba2246eaf4ba0bb724 /meta/recipes-support/rng-tools
parentba2cfcc6ddc06e45beb50fe1f2fc18755e155ffa (diff)
downloadpoky-b3b7ee4097b42b06f92127ca98663a96284ee185.tar.gz
rng-tools: Fix crazy defaults
Feeding the output of /dev/urandom into /dev/random is pretty much insane and not something we should encourage. I can't really imagine a scenario where this would be a sensible idea since /dev/urandom if effectively derived from /dev/random. This changes the tool to default to /dev/hwrng which makes much more sense, feeding hardware entropy into the random pool. In the QEMU case, this will feed entropy from the host into the guests which is also what we want. Yes, this change will cause rngd not to start if /dev/hwrng isn't present, but it isn't needed if that isn't so I don't see this as a bad thing. (https://wiki.archlinux.org/index.php/Rng-tools has a section in red which agrees with the above, "this is a really bad idea, since you are simple filling the kernel entropy pool with entropy coming from the kernel itself!") (From OE-Core rev: f1dc9ac46710814c27cae2d22e79c84a9522993a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-support/rng-tools')
-rw-r--r--meta/recipes-support/rng-tools/rng-tools/default3
1 files changed, 1 insertions, 2 deletions
diff --git a/meta/recipes-support/rng-tools/rng-tools/default b/meta/recipes-support/rng-tools/rng-tools/default
index 7aede9be03..ab7cd9327f 100644
--- a/meta/recipes-support/rng-tools/rng-tools/default
+++ b/meta/recipes-support/rng-tools/rng-tools/default
@@ -1,3 +1,2 @@
1# Specify rng device 1# Specify rng device
2#RNG_DEVICE=/dev/hwrng 2RNG_DEVICE=/dev/hwrng
3RNG_DEVICE=/dev/urandom