The following commit has been merged in the master branch:
commit a09159a4fb4d754698fb01f12d4e83fb0f6474f1
Author: Samuel Thibault <[email protected]>
Date: Sun Nov 6 03:24:50 2011 +0100
Create random-seed with read access only to root.
diff --git a/debian/hurd.postinst b/debian/hurd.postinst
index f6b0ead..4828112 100644
--- a/debian/hurd.postinst
+++ b/debian/hurd.postinst
@@ -70,8 +70,11 @@ if [ "$1" = configure ] && [ "$2" ]; then
--slave /dev/urandom urandom /dev/urandom-hurd
# Generate initial pool
+ UMASK=`umask`
+ umask 077
[ -f /var/spool/random-seed ] || dd < /dev/urandom >
/var/spool/random-seed bs=1 count=600
# TODO: will need to run settrans -ga /dev/random at system stop to
make
# it save it back
+ umask $UMASK
fi
--
Debian GNU Hurd packaging
