Messages in this thread | | | Subject | Re: [PATCH] OpenBSD Networking-related randomization port | From | Arjan van de Ven <> | Date | Fri, 28 Jan 2005 19:07:57 +0100 |
| |
On Fri, 2005-01-28 at 18:17 +0100, Lorenzo Hernández García-Hierro wrote: > Hi, > > Attached you can find a split up patch ported from grSecurity [1], as > Linus commented that he wouldn't get a whole-sale patch, I was working > on it and also studying what features of grSecurity can be implemented > without a development or maintenance overhead, aka less-invasive > implementations.
why did you make it a config option? This is the kind of thing that is either good or isn't... at which point you can get rid of a lot of, if not all the ugly ifdefs the patch adds.
Also, why does it need to enhance the random driver this much, the random driver already has a facility to provide pseudorandom numbers good enough for networking use (eg the PRNG rekeys often enough with real entropy that brute forcing it shouldn't be possible).
If you can fix those 2 things the patch will look a lot cleaner and has a lot higher chance to be merged.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |