"Theodore Y. Ts'o" wrote:

> I'd certainly agree that having a standard user-space library would be a
> Good Thing.  The real question in my mind is should the code live in
> user space or in kernel space.

Definitely kernel space.  Precisely because a good source of entropy is:

   * not computable, you need to get it from a device
   * essential for assorted security applications

it needs to be in kernel space, where it can talk to raw devices, and be
protected from corruption & spoofing.

Crispin
-----
 Crispin Cowan, Research Assistant Professor of Computer Science, OGI
    NEW:  Protect Your Linux Host with StackGuard'd Programs  :FREE
       http://www.cse.ogi.edu/DISC/projects/immunix/StackGuard/

Reply via email to