------- Comment From [email protected] 2016-04-12 11:18 EDT------- Permissions for /dev/prandom device file are as expected now with kernel 4.4.0-18-generic. 'tester' user was able to read random data from the device.
Details ===== Created a test user and loaded the prng module. uid=1000(tester) gid=1000(tester) groups=1000(tester) tester@s35lp35:~$ ll /dev/prandom crw-r--r-- 1 root root 10, 54 Apr 12 17:08 /dev/prandom tester@s35lp35:~$ modinfo prng filename: /lib/modules/4.4.0-18-generic/kernel/arch/s390/crypto/prng.ko description: s390 PRNG interface author: IBM Corporation license: GPL srcversion: 60384609D5BAFDCBFD35A32 alias: cpu:type:*:feature:*0003* depends: intree: Y vermagic: 4.4.0-18-generic SMP mod_unload modversions parm: mode:int parm: prng_mode:PRNG mode: 0 - auto, 1 - TDES, 2 - SHA512 parm: chunksize:int parm: prng_chunk_size:PRNG read chunk size in bytes parm: reseed_limit:int parm: prng_reseed_limit:PRNG reseed limit -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd in Ubuntu. https://bugs.launchpad.net/bugs/1558275 Title: wrong/missing permissions for device file /dev/prandom (prng.ko) Status in linux package in Ubuntu: Fix Released Status in s390-tools package in Ubuntu: Invalid Status in systemd package in Ubuntu: Invalid Status in linux source package in Xenial: Fix Released Status in s390-tools source package in Xenial: Invalid Status in systemd source package in Xenial: Invalid Bug description: The access rights for /dev/prandom are set to 0600. The prandom file is created upon loading the prng module. Expectation: The access rights are set to 0644. Details ===== root@s83lp22:~# modinfo prng filename: /lib/modules/4.4.0-13-generic/kernel/arch/s390/crypto/prng.ko description: s390 PRNG interface author: IBM Corporation license: GPL srcversion: B48774F4AEBAE6DB4983C98 alias: cpu:type:*:feature:*0003* depends: intree: Y vermagic: 4.4.0-13-generic SMP mod_unload modversions parm: mode:int parm: prng_mode:PRNG mode: 0 - auto, 1 - TDES, 2 - SHA512 parm: chunksize:int parm: prng_chunk_size:PRNG read chunk size in bytes parm: reseed_limit:int parm: prng_reseed_limit:PRNG reseed limit Contact Information = [email protected] ---uname output--- Linux s83lp22 4.4.0-13-generic #29-Ubuntu SMP Fri Mar 11 19:30:41 UTC 2016 s390x s390x s390x GNU/Linux Machine Type = Manufacturer: IBM Type: 2964 Model: 702 N96 ---Steps to Reproduce--- 1) modprobe prng 2) ls -l /dev/prandom This is a s390x issue. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1558275/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
