Module Name: src Committed By: tls Date: Mon Nov 28 07:56:54 UTC 2011
Modified Files: src/share/man/man5: boot.cfg.5 src/sys/arch/i386/stand/boot: boot2.c src/sys/arch/i386/stand/lib: bootmod.h exec.c libi386.h src/sys/arch/x86/include: bootinfo.h src/sys/arch/x86/x86: x86_machdep.c src/sys/dev: rnd.c Log Message: Add support for passing saved entropy (random seed file) to the kernel from the bootloader. This can fix the problem of poor quality keys for other kernel modules which call arc4random() early in kernel startup (NFS startup, in particular, causes this). We continue to rely on the etc/rc.d/random_seed script to save entropy to the seed file at shutdown and erase the seed file at startup. Boot loader support implemented only for i386 and amd64 ports for now but it should be easy for other ports to do the same or similar. To generate a diff of this commit: cvs rdiff -u -r1.22 -r1.23 src/share/man/man5/boot.cfg.5 cvs rdiff -u -r1.55 -r1.56 src/sys/arch/i386/stand/boot/boot2.c cvs rdiff -u -r1.4 -r1.5 src/sys/arch/i386/stand/lib/bootmod.h cvs rdiff -u -r1.48 -r1.49 src/sys/arch/i386/stand/lib/exec.c cvs rdiff -u -r1.37 -r1.38 src/sys/arch/i386/stand/lib/libi386.h cvs rdiff -u -r1.18 -r1.19 src/sys/arch/x86/include/bootinfo.h cvs rdiff -u -r1.56 -r1.57 src/sys/arch/x86/x86/x86_machdep.c cvs rdiff -u -r1.86 -r1.87 src/sys/dev/rnd.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.