Re: Linux kernel + devtmpfs automount == insecure /dev/{,u}random mode

[Tim Brown <tmb () 65535 com>]

On Wednesday 13 Mar 2013 08:35:54 gremlin () gremlin ru wrote:

*snip*

> The obvious fix is to create these devices with mode 0644,
> so only root will be able to re-initialize the entropy pool.

On Debian at least:

/lib/udev/rules.d/91-permissions.rules:KERNEL=="random",                
MODE="0666"
/lib/udev/rules.d/91-permissions.rules:KERNEL=="urandom",               
MODE="0666"

> Possibly, this even deserves a CVE to be assigned...

Tim
-- 
Tim Brown
<mailto:tmb () 65535 com>

Attachment: signature.asc
Description: This is a digitally signed message part.