OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: /dev/random as (chrooted) named's entropy source [current]

From: Jan Stary (hansstare.cz)
Date: Fri Apr 04 2008 - 05:32:41 CDT


> >Trying to give named its own random-source, I stopped named, did
> >
> ># cd /var/named/dev/
> ># /dev/MAKEDEV arandom
> ># ls -l
> >total 0
> >crw-r--r-- 1 root wheel 45, 4 Apr 3 14:16 arandom
> >srw-rw-rw- 1 root wheel 0 Apr 3 13:51 log
> >crw-r--r-- 1 root wheel 45, 3 Apr 3 14:16 prandom
> >crw-r--r-- 1 root wheel 45, 0 Apr 3 14:16 random
> >crw-r--r-- 1 root wheel 45, 1 Apr 3 14:16 srandom
> >crw-r--r-- 1 root wheel 45, 2 Apr 3 14:16 urandom
> >
> >and started named again. Now the log says
> >
> >named[25688]: /usr/src/usr.sbin/bind/lib/isc/unix/errno2result.c:111: unexpected error:
> >named[25688]: unable to convert errno to isc_result: 6: Device not configured
> >named[25688]: could not open entropy source /dev/arandom: unexpected error
> >named[25688]: using pre-chroot entropy source /dev/arandom
> >
> >So why is /var/named/dev/arandom "not configured". Is there something
> >that needs to be done beside MAKEDEV?
>
> Is /var marked 'nodev' in /etc/fstab?

Yes it was (I knew it would break something).

        Thanks

                Jan