openwrtv3/package/base-files/files/etc/init.d
Etienne CHAMPETIER 3946a55291 base-files: seed /dev/urandom
This commit:
1) seed /dev/urandom with the saved seeds as early as possible
   (see /lib/preinit/81_urandom_seed)
2) save a seed at /etc/urandom.seed if it doesn't exists
3) save a new seed each boot at "system.@system[0].urandom_seed"
   (see /etc/init.d/urandom_seed)

We use getrandom() so we are sure /dev/urandom pool is initialized

Seed size is 512 bytes (ie /proc/sys/kernel/random/poolsize / 8)
it's the same size as in ubuntu 14.04 and all systemd systems

Seeding /dev/urandom doesn't change entropy estimation, so we still have
"random: ubus urandom read with 4 bits of entropy available"
messages in the logs, but we can now ignore them if
after "urandom-seed: Seeding with ..." message

Saving a new seed on each boot is disabled by default to avoid too much
writes without user consent

v2: log preinit messages to /dev/kmsg
v3: use non generic function name for logging, as /lib/preinit/ files
    are all sourced together in /etc/preinit
v4: after a lot of discussion on the ML, use a uci config param
v5: config param is now the path of the seed

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
Acked-by: Jo-Philipp Wich <jo@mein.io>
2016-06-30 22:48:39 +02:00
..
boot base-file: remove /tmp/.jail (now useless) 2015-12-11 15:06:31 +00:00
done fstools: update to the latest version, makes interrupted first boot more reliable 2015-03-22 15:11:27 +00:00
gpio_switch base-files: implemented basic GPIO control 2015-07-08 14:25:52 +00:00
led base-files: maintain LED config state 2016-06-08 10:34:50 +02:00
sysctl sysctl: read settings from /etc/sysctl.d/*.conf 2015-07-07 13:47:23 +00:00
sysfixtime base-files: sysfixtime no longer exclude dnsmasq.time 2016-06-24 13:56:30 +02:00
system branding: add LEDE branding 2016-03-24 22:40:13 +01:00
umount base-files: fix mount-utils incompatibility 2013-12-27 21:15:09 +00:00
urandom_seed base-files: seed /dev/urandom 2016-06-30 22:48:39 +02:00