On 2017-6-14 08:18 , Christopher Jones wrote:
Had a look into this. The ROOT source never explicitly opens /dev/random in
read/write mode. Only read only.
However, it also uses a number of external library calls, like std::rand(), and
my best bet is one of these is doing it. As writing to /dev/random is allowed,
to update the entropy pool, I don’t think this in itself is an issue.
So is it OK to add /dev/random to the allowed locations for the sandbox ?
Yes, that would be fine.
I had a look at the xnu source by the way, and writing to /dev/random on
Darwin is indeed equivalent to writing to /dev/null; the kernel doesn't
use the written data in any way.
- Josh
