diff options
author | William Hubbs <w.d.hubbs@gmail.com> | 2022-03-30 11:15:13 -0500 |
---|---|---|
committer | William Hubbs <w.d.hubbs@gmail.com> | 2022-03-30 22:07:35 -0500 |
commit | 0fb11190fa5911f6f9c20c38e74a664826157a34 (patch) | |
tree | 29649ac0c1724e0cb7c9d9e823587fbd5798d55f /conf.d/seedrng | |
parent | df18158e60dc6bfe9a77ac7d1b48417f808f5b11 (diff) |
add seedrng service for Linux
This moves urandom to *bsd only and adds seedrng as a separate service
for Linux.
This fixes #510
Diffstat (limited to 'conf.d/seedrng')
-rw-r--r-- | conf.d/seedrng | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/conf.d/seedrng b/conf.d/seedrng new file mode 100644 index 00000000..61670504 --- /dev/null +++ b/conf.d/seedrng @@ -0,0 +1,17 @@ +# The convention in this file is to show the default settings +# commented out. +# +# Sometimes you want to have urandom start before "localmount" +# (say for crypt swap), so you will need to customize this +# behavior. If you have /var on a separate partition, make sure paths +# under /var are adjusted to point to locations on your +# root device. +# +# Set skip_credit to yes or true if you do not want seed files to +# actually credit the random number generator. +# For example, you should set this if you plan to replicate the file +# system image without removing the contents of ${seed_dir}. +# +# lock_file=/var/run/seedrng.lock +# seed_dir=/var/lib/seedrng +# skip_credit=no |