Re: [PATCH] random: add blocking facility to urandom

2011-09-09 Thread Eric Paris
On Thu, Sep 8, 2011 at 12:13 PM, David Miller wrote: > From: Steve Grubb >> This patch does not _break_ all existing applications. If a system were >> under attack, >> they might pause momentarily, but they do not break. Please, try the patch >> and use a >> nice large number like 200 and

Re: [PATCH 1/5] Add general crypto auditing infrastructure

2010-11-23 Thread Eric Paris
On Tue, 2010-11-23 at 13:25 -0500, Miloslav Trmac wrote: > - "Eric Paris" wrote: > > On Tue, 2010-11-23 at 13:50 +0100, Miloslav Trmač wrote: > > > Collect audited crypto operations in a list, because a single _exit() > > > can cause several AF_ALG socke

Re: [PATCH 1/5] Add general crypto auditing infrastructure

2010-11-23 Thread Eric Paris
On Tue, 2010-11-23 at 13:50 +0100, Miloslav Trmač wrote: > Collect audited crypto operations in a list, because a single _exit() > can cause several AF_ALG sockets to be closed, and each needs to be > audited. > > Add the AUDIT_CRYPTO_OP field so that crypto operations are not audited > by default