diff options
| author | Nick Kralevich <nnk@google.com> | 2013-09-17 16:18:23 -0700 |
|---|---|---|
| committer | Nick Kralevich <nnk@google.com> | 2013-09-18 07:53:51 -0700 |
| commit | b410eb19130cf1eca158a672bba8f515e7627f11 (patch) | |
| tree | 86bea1774e2ac5f1199b8733966985e88c2a6150 /libutils/ProcessCallStack.cpp | |
| parent | 5535b05120fa3fd3d68a09e01284aba35cc6e058 (diff) | |
Initialize /dev/urandom earlier in boot.
It's a security best practice to carry entropy across reboots.
(see "man 4 random"). Currently, entropy saving and mixing occur
in the system_server, via the EntropyMixer code. Unfortunately, the
EntropyMixer code runs fairly late in the boot process, which means
early boot doesn't have high quality entropy. This has caused security
problems in the past.
Load entropy data as soon as we can in the early boot process, so that
we can get /dev/random / /dev/urandom into a "random" state earlier.
Bug: 9983133
Change-Id: Id4a6f39e9060f30fe7497bd8f8085a9bec851e80
Diffstat (limited to 'libutils/ProcessCallStack.cpp')
0 files changed, 0 insertions, 0 deletions