Messages in this thread |  | | | Date | Sun, 19 Aug 2001 22:34:49 +0100 | | From | Alex Bligh - linux-kernel <> | | Subject | Re: [PATCH] let Net Devices feed Entropy, updated (1/2) |
| |
Gene,
> Perhaps the patch does this already, but if there are concerns about > pollution from the nasty outside is it possible to add a flag to /proc > to turn this on/off by interface - that way it could easily be limited > to only get influenced by the inside network rather than the outside.
No it doesn't do this, but:
Because it looks at inter-IRQ timing, the risk is mainly (as per previous posting) the theoretical risk of being able to determine that inter-IRQ timing from observation of the network(s) connected. So an attacker sending packets at known intervals on one network when interleaved with packets arriving at unknown intervals on another network will not do them much good. Equally observations made on packet timings on one network will be useless if those packets are interleaved with packets arriving on another network. As per previous posting, there is a theoretical risk, (magnitude dependent upon environment) - hence the config option - but rather smaller than the risk (say) if you are using a radio mouse & keyboard.
-- Alex Bligh - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |