From 0fb11190fa5911f6f9c20c38e74a664826157a34 Mon Sep 17 00:00:00 2001
From: William Hubbs <w.d.hubbs@gmail.com>
Date: Wed, 30 Mar 2022 11:15:13 -0500
Subject: add seedrng service for Linux

This moves urandom to *bsd only and adds seedrng as a separate service
for Linux.

This fixes #510
---
 conf.d/seedrng | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 conf.d/seedrng

(limited to 'conf.d/seedrng')

diff --git a/conf.d/seedrng b/conf.d/seedrng
new file mode 100644
index 00000000..61670504
--- /dev/null
+++ b/conf.d/seedrng
@@ -0,0 +1,17 @@
+# The convention in this file is to show the default settings
+# commented out.
+#
+# Sometimes you want to have urandom start before "localmount"
+# (say for crypt swap), so you will need to customize this
+# behavior.  If you have /var on a separate partition, make sure paths
+# under /var are adjusted to point to locations on your
+# root device.
+#
+# Set skip_credit to yes or true if  you do not want seed files to
+# actually credit the random number generator.
+# For example, you should set this if you plan to replicate the file
+# system image without removing the contents of ${seed_dir}.
+#
+# lock_file=/var/run/seedrng.lock
+# seed_dir=/var/lib/seedrng
+# skip_credit=no
-- 
cgit v1.2.3