Bug#523387: [Pkg-shadow-devel] Bug#505640: Bug#523387: mkpasswd should be removed

2009-04-10 Thread Nicolas François
On Fri, Apr 10, 2009 at 02:38:26PM +0200, m...@linux.it wrote: > On Apr 09, Nicolas François wrote: > > > In shadow, I had to use gettimeofday(&tv, NULL); > > srandom (tv.tv_sec + tv.tv_usec) because many passwords had to be > > generated per second and by the same process. > I implemented both t

Bug#523387: [Pkg-shadow-devel] Bug#505640: Bug#523387: mkpasswd should be removed

2009-04-10 Thread Marco d'Itri
On Apr 09, Nicolas François wrote: > In shadow, I had to use gettimeofday(&tv, NULL); > srandom (tv.tv_sec + tv.tv_usec) because many passwords had to be > generated per second and by the same process. I implemented both this and support for /dev/urandom, the patch is available at http://www.bofh

Bug#523387: [Pkg-shadow-devel] Bug#505640: Bug#523387: mkpasswd should be removed

2009-04-09 Thread Nicolas François
Hello, On Thu, Apr 09, 2009 at 10:22:40PM +0200, m...@linux.it wrote: > > On Apr 09, Kees Cook wrote: > > > Additionally, the code is buggy and not very random: > > > > srand(time(NULL) + getpid()); > > > > This needs to at least use /dev/urandom, or sec+usec as done in shadow. > Initiali