gssproxy

#255 Use getrandom() for random numbers
Merged by rharwood. Opened by simo.
simo/gssproxy getrandom  into  master

Download 255.patch

Although this place id not cryptgraphically relevant, there is no point
in not using a proper random value. This happens only once so it is not
a performance issue.

Fixes #254

(Note: I assume musl has support for getrandom, but I have no way to test, if not it's a musl problem)

rebased onto b36c181bfc0d75f461c892782259c2c2acc29394

I'm not aware of anyone using gssproxy with musl, but getrandom is a syscall, so it'd be easy to add to musl if it's missing. (Tangent: in krb5 I use the syscall() version due to kernels supporting it before glibc did, but we don't care about that here.)

While I'd love it if this weren't a performance issue, the fact is we keep getting bugs about gssproxy blocking system start due to not having enough entropy. Since this is the same entropy conditions we operate under there, it won't change anything, but if it were new, it would.

Commit 23c52157 fixes this pull-request

Pull-Request has been merged by rharwood
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.