Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-19 Thread Iain Hibbert
On Wed, 14 Nov 2012, Iain Hibbert wrote: On Wed, 14 Nov 2012, Iain Hibbert wrote: On Mon, 12 Nov 2012, Iain Hibbert wrote: On Fri, 9 Nov 2012, Thor Lancelot Simon wrote: On Sat, Nov 10, 2012 at 12:39:59AM +0700, Robert Elz wrote: How? And if that's something

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-14 Thread Iain Hibbert
On Mon, 12 Nov 2012, Iain Hibbert wrote: On Fri, 9 Nov 2012, Thor Lancelot Simon wrote: On Sat, Nov 10, 2012 at 12:39:59AM +0700, Robert Elz wrote: How? And if that's something that is supposed to be enabled, why does the default install not just enable it? Did you install

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-14 Thread Iain Hibbert
On Wed, 14 Nov 2012, Iain Hibbert wrote: On Mon, 12 Nov 2012, Iain Hibbert wrote: On Fri, 9 Nov 2012, Thor Lancelot Simon wrote: On Sat, Nov 10, 2012 at 12:39:59AM +0700, Robert Elz wrote: How? And if that's something that is supposed to be enabled, why does the

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-12 Thread Iain Hibbert
On Fri, 9 Nov 2012, Thor Lancelot Simon wrote: On Sat, Nov 10, 2012 at 12:39:59AM +0700, Robert Elz wrote: How? And if that's something that is supposed to be enabled, why does the default install not just enable it? Did you install by upgrading? If so, I think what you've run into

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-10 Thread Iain Hibbert
On Sat, 10 Nov 2012, Robert Elz wrote: Date:Fri, 9 Nov 2012 19:34:05 -0500 From:Thor Lancelot Simon t...@panix.com Message-ID: 20121110003405.ga4...@panix.com | No, the cprng named kernel is used _inside_ the kernel. It hadn't occurred to me before that that

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-10 Thread Iain Hibbert
On Sat, 10 Nov 2012, Iain Hibbert wrote: On Sat, 10 Nov 2012, Robert Elz wrote: Date:Fri, 9 Nov 2012 19:34:05 -0500 From:Thor Lancelot Simon t...@panix.com Message-ID: 20121110003405.ga4...@panix.com | No, the cprng named kernel is used _inside_ the

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-10 Thread David Laight
On Fri, Nov 09, 2012 at 06:53:45PM -0500, Greg Troxel wrote: FWIW, I agree with the notion that defaults should be at a path that is ~always in root; it's normal to have /var in a separate fileystem (at least for old-school UNIX types; I realize the kids these days think there should be one

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-10 Thread Thor Lancelot Simon
On Sat, Nov 10, 2012 at 11:36:14AM +0700, Robert Elz wrote: In any case, for the entropy-file, the point is not whether one of these styles is better than the other, but that the system should work (fully) with either strategy, which means the entropy file should be somewhere that the boot

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-10 Thread Robert Elz
Date:Sat, 10 Nov 2012 11:39:47 -0500 From:Thor Lancelot Simon t...@panix.com Message-ID: 20121110163947.ga1...@panix.com | It's not as simple as you make it seem. Oh, I know it isn't simple. | The system should be able to run with readonly /. Yes, it should

cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Iain Hibbert
Hi I get the above message during boot up. Every boot. Twice. At the same place.. Why is it necessary to SHOUT a warning, about what seems to be a normal occurrence? regards, iain

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Thor Lancelot Simon
On Fri, Nov 09, 2012 at 05:07:38PM +, Iain Hibbert wrote: Hi I get the above message during boot up. Every boot. Twice. At the same place.. Why is it necessary to SHOUT a warning, about what seems to be a normal occurrence? It should not be a normal occurrence. Does your port

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Robert Elz
Date:Fri, 9 Nov 2012 12:12:50 -0500 From:Thor Lancelot Simon t...@panix.com Message-ID: 20121109171249.ga9...@panix.com | It should not be a normal occurrence. I see the same thing. | Does your port support loading entropy from the bootblocks? I have no idea,

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Iain Hibbert
On Fri, 9 Nov 2012, Thor Lancelot Simon wrote: On Fri, Nov 09, 2012 at 05:07:38PM +, Iain Hibbert wrote: I get the above message during boot up. Every boot. Twice. At the same place.. Why is it necessary to SHOUT a warning, about what seems to be a normal occurrence? It should

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Thor Lancelot Simon
On Sat, Nov 10, 2012 at 12:39:59AM +0700, Robert Elz wrote: How? And if that's something that is supposed to be enabled, why does the default install not just enable it? Did you install by upgrading? If so, I think what you've run into is that your boot loader configuration has the old

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Robert Elz
Date:Fri, 9 Nov 2012 13:13:25 -0500 From:Thor Lancelot Simon t...@panix.com Message-ID: 20121109181325.ga19...@panix.com | Did you install by upgrading? No, it is a fresh install off an install CD. It is on a virtualbox running under Windows 7 (one day that

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Alexey Khramkov
Hello all. - Original Message - From: Robert Elz Sent: 11/09/12 11:33 PM To: Thor Lancelot Simon Subject: Re: cprng sysctl: WARNING pseudorandom rekeying. Date: Fri, 9 Nov 2012 13:13:25 -0500  From: Thor Lancelot Simon t...@panix.com  Message-ID: 20121109181325.ga19...@panix.com

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Robert Elz
Date:Fri, 09 Nov 2012 21:20:38 +0100 From:Alexey Khramkov y...@gmx.ru Message-ID: 20121109202039.143...@gmx.com | I have separate /var partition. Oh yes, of course - that never occurred to me, so do I - and that's going to mean that a copy of the entropy file can't

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Thor Lancelot Simon
On Sat, Nov 10, 2012 at 02:33:57AM +0700, Robert Elz wrote: And actually looking carefully at /var/log/messages its timestamps, (rather than just the console without them) it seems as if it happens a couple of hours after the system was booted. That's more serious, then. That means

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Thor Lancelot Simon
On Sat, Nov 10, 2012 at 03:42:48AM +0700, Robert Elz wrote: Date:Fri, 09 Nov 2012 21:20:38 +0100 From:Alexey Khramkov y...@gmx.ru Message-ID: 20121109202039.143...@gmx.com | I have separate /var partition. Oh yes, of course - that never occurred to me, so do

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Robert Elz
Date:Fri, 9 Nov 2012 17:49:16 -0500 From:Thor Lancelot Simon t...@panix.com Message-ID: 20121109224916.gb29...@panix.com | Ah, right! You need to edit rc.conf and boot.cfg to reflect this. Some | systems put the entropy file in /etc for this reason. I installed

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Greg Troxel
FWIW, I agree with the notion that defaults should be at a path that is ~always in root; it's normal to have /var in a separate fileystem (at least for old-school UNIX types; I realize the kids these days think there should be one whole-disk fs as /). pgpIxpye42BeB.pgp Description: PGP

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Brian Buhrow
On Nov 10, 6:33am, Robert Elz wrote: } Subject: Re: cprng sysctl: WARNING pseudorandom rekeying. } Date:Fri, 9 Nov 2012 17:49:16 -0500 } From:Thor Lancelot Simon t...@panix.com } Message-ID: 20121109224916.gb29...@panix.com } } | Ah, right! You need to edit

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Taylor R Campbell
Date: Fri, 09 Nov 2012 18:53:45 -0500 From: Greg Troxel g...@ir.bbn.com FWIW, I agree with the notion that defaults should be at a path that is ~always in root; it's normal to have /var in a separate fileystem (at least for old-school UNIX types; I realize the kids these days think

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Robert Elz
Date:Sat, 10 Nov 2012 00:02:24 + From:Taylor R Campbell campbell+netbsd-tech-k...@mumble.net Message-ID: 2012111144.b11bb60...@jupiter.mumble.net | It has always made me a trifle nervous that there are various things | such as dhcp clients touching

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Thor Lancelot Simon
On Sat, Nov 10, 2012 at 06:33:59AM +0700, Robert Elz wrote: | That's more serious, then. That means something on your system is pulling | a comparatively huge number of bits from the general-purpose kernel RNG | instance, and nothing's putting enough bits into the pool to rekey it.

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Robert Elz
Date:Fri, 9 Nov 2012 19:34:05 -0500 From:Thor Lancelot Simon t...@panix.com Message-ID: 20121110003405.ga4...@panix.com | No, the cprng named kernel is used _inside_ the kernel. It shouldn't | be depleted by use of ssh. OK. Can you suggest some possible kernel

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Mouse
[...] I realize the kids these days think there should be one whole-disk fs as / [...] To be fair, sometimes that's a right answer. Loosely put, it's a right answer whenever running out of space on any filesystem is equally bad and it's fine for that to mean running out of space on all. On

Re: cprng sysctl: WARNING pseudorandom rekeying.

2012-11-09 Thread Robert Elz
Date:Fri, 9 Nov 2012 23:01:30 -0500 (EST) From:Mouse mo...@rodents-montreal.org Message-ID: 201211100401.xaa23...@sparkle.rodents-montreal.org | To be fair, sometimes that's a right answer. Loosely put, it's a right | answer whenever running out of space on any