On Thu, 1 Oct 2020 18:57:12 +0200
Manuel Bouyer <[email protected]> wrote:

> > > OK. But how is it preserved across reboot ? Where does the kernel stores 
> > > it ?
> > 
> > Shutdown process will store a new seed file
> 
> ha OK, so it's preserved on shutdown(8), not reboot(2) 
> 
> which, basically. means that one should not use reboot, halt or poweroff
> any more ...

The seed file also gets rewritten immediately after being loaded during
rc boot, so that an adversary that can trigger a power outage or reset
cannot trivially force a seed to be reused.

-Tobias




Reply via email to