Re: [PATCH] allow tls_randfile to be a file or a character device
[
Date Prev][
Date Next]
[
Thread Prev][
Thread Next]
Re: [PATCH] allow tls_randfile to be a file or a character device
- From: Patrick McLean <chutzpah [at] gentoo.org>
- To: Arthur de Jong <arthur [at] arthurdejong.org>
- Cc: nss-pam-ldapd-users [at] lists.arthurdejong.org
- Subject: Re: [PATCH] allow tls_randfile to be a file or a character device
- Date: Tue, 10 Nov 2015 14:42:00 -0800
On Thu, 27 Aug 2015 21:30:10 +0200
Arthur de Jong <arthur@arthurdejong.org> wrote:
> Thanks for pointing this out. Since the file could also be a pipe or
> even a block device in theory, I've changed the check in check_file()
> to accept anything for now.
>
(I didn't get around to testing until now)
It looks like this check is still failing if tls_randfile points
to /dev/urandom. From looking at the code, check_readable checks for a
regular file:
if (!S_ISREG(sb.st_mode))
--
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users/
