Re: master.passwd(5) questions

2021-01-16 Thread Christos Zoulas
In article , Hauke Fath wrote: >Hi, > >I am looking at augmenting the linux-style 'shadow' map generation in >/var/yp/Makefile.yp. > >In this context: > >(1) The 'change' field in master.passwd can either be empty[*] (no >passwd aging), hold a maximum passwd age, or hold '-1', forcing the user

Re: Waiting for Randot (or: nia and maya were right and I was wrong)

2021-01-16 Thread Kamil Rytarowski
On 16.01.2021 14:29, Taylor R Campbell wrote: >> Date: Sat, 16 Jan 2021 13:21:21 +0100 >> From: Kamil Rytarowski >> >> On 11.01.2021 02:25, Taylor R Campbell wrote: >>> Many of you have no doubt noticed that a lot more things hang waiting >>> for entropy than used to on machines without hardware r

Re: Waiting for Randot (or: nia and maya were right and I was wrong)

2021-01-16 Thread Taylor R Campbell
> Date: Sat, 16 Jan 2021 14:34:47 +0200 > From: Andreas Gustafsson > > Even if the unblocking criteria of Linux and FreeBSD are questionable, > they still provide more security than your proposal which amounts to > having extremely strict criteria but then completely ignoring. This is not accura

Re: Waiting for Randot (or: nia and maya were right and I was wrong)

2021-01-16 Thread Taylor R Campbell
> Date: Sat, 16 Jan 2021 13:21:21 +0100 > From: Kamil Rytarowski > > On 11.01.2021 02:25, Taylor R Campbell wrote: > > Many of you have no doubt noticed that a lot more things hang waiting > > for entropy than used to on machines without hardware random number > > generators (even as we've added

Re: Waiting for Randot (or: nia and maya were right and I was wrong)

2021-01-16 Thread Andreas Gustafsson
Taylor R Campbell wrote: > > From: Andreas Gustafsson > > > > Your proposal would mean that > > such an application would generate predictable keys on NetBSD when no > > entropy is available, even though it will not on Linux. To me, that's > > completely u

Re: Waiting for Randot (or: nia and maya were right and I was wrong)

2021-01-16 Thread Martin Husemann
On Sat, Jan 16, 2021 at 01:21:21PM +0100, Kamil Rytarowski wrote: > Can we overload the ENOSYS return value and return it for CPUs without > hardware assisted random number generator? You mean: with not enough entropy available? The availablility of a hardware random number generator does not rea

Re: Waiting for Randot (or: nia and maya were right and I was wrong)

2021-01-16 Thread Kamil Rytarowski
On 11.01.2021 02:25, Taylor R Campbell wrote: > Many of you have no doubt noticed that a lot more things hang waiting > for entropy than used to on machines without hardware random number > generators (even as we've added a bunch of new drivers for HWRNGs) -- > e.g., python, firefox. Can we overlo